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CHAPTER 1 



GENERAL INFORMATION 



1.1 INTRODUCTION 

This manual describes the debugging monitor TENbug as it is used in the VME/10 
Microcomputer Syston, hereafter referred to as the VME/10. 



1.2 DEFINITION OF TENbug 

TENbug is the resident firmware debugging package for the VME/10. The 32K-byte 
firmware (stored in ROM or EPROM devices) provides a self-contained prograiiining 
and operating environment. TENbug interacts with the user through predefined 
commands that are entered via the terminal. The commands fall into five general 
categories: 

a. Gonroands which allow the user to display or modify memory. 

b. Commands which allow the user to display or modify the various internal 
registers of the MC68010. 

c. Commands which allow the user to execute a program under various levels 
of control. 

d. Commands which control access to the various input/output resources on 
the board. 

e. Commands which allow the user to select and test video features and 
graphics resolution. 



An additional function called the TRAP #15 I/O handler allows the user program 
to utilize various routines within TENbug. The TRAP #15 handler is discussed in 
Chapter 6. 

The operational mode of TENbug is described in Chapter 2. 



1.3 TENbug INTERNAL STRUCTURE 
1.3.1 Memory Map 

The following abbreviated memory map for the VME/10 highlights addresses that 
might be of particular interest to TENbug users. Refer to the VME/10 
Microcomputer System Reference Manual for a complete description of the memory 
maps for both high- and low-resolution graphics modes. 

Note that addresses are assumed to be hexadecimal throughout this manual. In 
text, numbers may be preceded with a dollar sign ($) for identification as 
hexadecimal . 
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RAM LOCATION 



FUNCTION 



0-3FF 
400-AFF 



Vectors 

Work area and stack for TENbug 



SPECIAL LOCATIONS FUNCTION 



F00000-F00007 



Area containing initial values for supervisor stack 
pointer, program counter, and vector base register after 
cold start 



F14000-F14FFF 



Area used to define programmable "soft" character set 



I/O LOCATION 



FUNCTION 



F1C1C9 
FICICB 
FICIEI 
F1C1E9 
FlCODl 



Serial port 2 
Serial port 3 
Parallel port 
Parallel port 



(host) , serial I/O card (optional) 
(host) , serial I/O card (optional) 

1 (printer) , parallel I/O card (optional) 

2 (printer) , parallel I/O card (optional) 



Base address of RWINl Disk Controller 



1,3.2 Vectors and Errors 

TENbug shares resources with the target program under test — that is, each 
affected resource can be used only by TENbug or the target program at any given 
time. 

Exception vectors are memory locations from which the processor fetches the 
address of a routine which will handle the exception. These vectors are 
initialized by TENbug in default memory locations 0 through $3FF during a cold- 
er warm-start sequence (see Chapter 2) . If the target program uses any of these 
locations, the user values must be rewritten following each cold or warm start. 
If the target program uses any of the following locations, the associated 
function will be lost to TENbug. 

MEMORY LOCATION TENbug FUNCTION 

10-13 Breakpoints (illegal instructions) 

24-27 Trace 

BC-BF TRAP #15 user calls to TENbug 

138-13B ABORT pushbutton switch on VME/10 operator panel 

(refer to ^^pendix A) 



The vectors with default memory locations of $80 through $3FF cause a ???? ERROR 
TRAP message to be displayed on the console terminal. In addition, several of 
the vectors cause display of appropriate information. (Refer to Appendix B for 
a list of error messages.) BUS and ADDR error traps also cause display of the 
exception status from the stack, in hexadecimal characters, as shown in the 
following example. 
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status Register 

Program Counter Mdress 

Frame Format and Vector Offset 
_ Special Status Word 
Fault Mdress 



2709 00F6533A 8008 1305 00FiC030 0000 0020 0000 20FF OOFO 2007 067A 

5338 0000 OOFl 2007 C030 OOFO 533C FFEl 0000 0394 1E14 0000 0004 1E14 0003 

BUS ERROR TRAP 



For additional information on this display, refer to the bus error, address 
error, and the reference classification descriptions in the exception processing 
chapter of the M68000 16/32-Bit Microprocessor Programner ' s Reference Manual, 

1,3. 2,1 Resettir^ Vector Base Register . The MC68010 processor upon which the 
VME/10 is based features a Vector Base Register (VBR) which contains the base 
(starting) address for the VME/10 exception vectors. Exception vectors are 
located in menriory addresses 0 through $3FF relative to the VBR. L^on reset 
(cold or warm start) of the MC68010', the value of the VBR is set to zero. 

TENbug must have control of the exception vectors to function properly. If the 
user sets the VBR to a value other than its default value of zero, he must also 
establish a new set of exception vector memory locations for the VBR value. In 
other words, the user must copy all existing vector memory locations to the same 
relative location in the new VBR table. 

In the following example, the VBR value is changed from 0 to lOFOO. Exception 
vector memory locations must also be copied to this new location. Note that the 
content of each vector memory location (i.e., the appropriate routine address) 
remains the same. 
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3FC 



VBR = 0 



00000444 



0000044C 



00000454 



000008A4 



lOFOO 
10F04 
10F08 
lOFOC 



7 



112FC 



VBR = lOFOO 



00000444 



0000044C 



00000454 



000008A4 
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1.3.3 Disk I/O 

TENbug provides limited support of disk I/O through a Winchester Disk 
Controller. The commands supported are BH, BO, IOC, lOP, and lOT. Each of 
these commands does a read of the volume ID found on sector 0 of a disk. 

NOTE 

A sector is 256 bytes. The disk controller maps 
physical sectors on various disks into virtual 
256-byte sectors at the controller interface. 

The first 256 bytes of the media are the volume ID. Bytes $F8-$FF of the volume 
ID must contain either the ASCII character string "EXORMACS" or "MOTOROLA"; 
otherwise, an error message will result. For more information on interpreting 
the data displayed, see the Winchester Disk Controller User's Manual. 

The other information used from the volume ID is: 



BYTES 


USED FOR 


$14-$17 


Starting sector address of program to be loaded (via BH, BO) . 


$18-$19 


Number of 256-byte sectors to be loaded. 


$1E-$21 


Load address (first destination memory byte) . 


$90-$93 


Sector address of media configuration parameters (refer to 




J^pendix C) . 


$94 


Length of configuration area (usually one 256-byte sector) . 



1.4 TENbug WITH SYSTEM V/68 

The following paragraphs list information specific to the use of TENbug with 
SYSTEM V/68. 

1.4.1 Operational Coitmands 

In the following list, commands given in parentheses indicate the key that is to 
be pressed. Commands not given in parentheses are to be typed as shown. 



BH Boots the operating system from the fixed disk and halts. 

BO Boots the operating systsn from the fixed disk and gives 
control to the program loaded. 

(BREAK) Aborts command. 

(DEL) Deletes character. 

(CTRL-D) Redisplays line. 

(CTRL-H) Deletes character. 

(CTRL-W) Suspends output; any character continues output. 

(CTRL-X) Cancels command line. 
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1.4,2 Debugging Commands 

The following commands may be useful for debugging, but should be used only in 
single-user mode after sync has executed. Use of these commands may result in 
the need for system reboot. 



.A0-.A7 


BARS, NOBARS * 


HE 


.D0-.D7 


BF 


IOC 


.DFC 


BM 


lOP 


.PC 


BR, NOBR 


lOT 


.R0-.R6 


BS 


MD 


.SFC 


CH, NOCH 


MM 


.SR 


CRT 


MS 


.SSP 


CS 


OF 


.USP 


DC 


PA, NOPA 


.VBR 


DP 


TR 




GD 


TT 




GO 






GR, NOGR 






GT 





* This command modifies graphics memory and should be used only with an 
operating system configured to support graphics. 



1.4.3 Non-Applicable Commands 

The following commands should be used in a stand-alone mode; they should not be 
used with SYSTEM V/68. 

HI PF 

BT TM 

DU VE 
LO 



1.5 REFERENCE MANUALS 

Refer to the following documents for more information on the environments in 
which TENbug is used. 

VME/10 Microcomputer System Overview Manual, M68KVSOM 

VME/10 Microcomputer System Diagnostics Manual, M68KVSDM 

VME/10 Microcomputer System Reference Manual, M68KVSREF 

VERSAdos to VME Hardware and Software Configuration User's Manual, MVMEDOS 

Winchester Disk Controller User's Manual, M68RWIN1 

MVME400 Dual RS-232C Serial Port Module User's Manual, MVME400 

MVME410 Dual 16-Bit Parallel Port Module User's Manual, MVME410 

M68000 16/32-Bit Microprocessor Programmer's Reference Manual, M68000UM 
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CHAPTER 2 



TENbug OPERATING PROCEDURE 



2.1 INTRODUCTION 



The following procedures enable the user to enter TENbug, For information on 

system installation, self-test diagnostic programs, and operating system 

initialization, refer to the VME/10 Microcomputer System Overview and 
Diagnostics manuals. 



2.2 CHASSIS CONTROL SWITCHES 



Before attempting to initiate TENbug, the user should be familiar with the 
operator panel located at the bottom left corner on the front of the VME/10 
chassis. This panel contains the following control switches which are supported 
by TENbug. Use of these switches is described in paragraphs 2.5 through 2.7. 



a. 



0 



- The amber-colored power on/off rocker-arm switch is used to 
turn on power to the VME/10 and initiate the power-up/reset self-test 
(PWRT) . VJhen the 0 side is pressed, power is off; when the 1 side is 
pressed, power is on. 



b. KYBD LOCK - The KYBD LOCK key switch controls a bit in a register which 
is monitored by TENbug. When the key switch is in the locked (vertical) 
position, VME/10 performs an automatic BO command from device 0 (this 
usually starts the operating systori) . When the key switch is in the 
unlocked (horizontal) position, VME/10 enters TENbug. Also, when the key 
switch is in the locked position, the front panel pushbutton switches 
RESET and ABORT, as well as the keyboard, are inoperative. This feature 
provides protection from inadvertent panel interrupts during system 
usage. 

c. RESET - When this momentary-action pushbutton switch is pressed, it 
resets the VME/10 logic circuits. If the VME/10 is in the operating 
system, TENbug is entered by pressing RESET (provided the KYBD LOCK key 
switch is in the unlocked position) . Because pressing RESET can cause 
indeterminate results, read the warm start description in paragraph 2.7 
before using this switch. 

d. ABORT - When this momentary-action pushbutton switch is pressed (provided 
the KYBD LOCK switch is in the unlocked position) , the VME/10 enters 
TENbug, but the VME/10 logic circuits are not reset. After an abort, the 
user can enter the character G to continue execution of the current 
program prior to the abort. Appendix A describes what occurs when the 
ABORT switch is pressed. 

e. RESET and ABORT - These buttons may be used in combination to accomplish 
the same thing as the on/off switch (item a.) without cycling power. 
This simulated cold-start sequence is described in paragraph 2.6. 
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2.3 TERMIICU:, CONTROL CHARACTERS 

Several keys are used as command line ,edit and control functions. The user 
should be familiar with these functions before using TENbug. The functions 
include: 

a. DEL key or CTRL H - will delete the last character entered on terminal, 

b. CTRL X - will cancel the entire line. 

c. CTRL D - will redisplay the entire line. 

d. < — I (carriage return) - will enter the comtnand line and cause 
processing to begin. 

e. CTRL W - will suspend system output to the terminal. To resume output to 
the terminal, any character can be entered. 

f . BREAK - will abort commands that do any console I/O and return to the 
input routine. 



For characters requiring the control key (CTRL) , the CTRL should be pressed and 
held down, and then the other key (H, X, D, or W) should be pressed. 



2.4 HEADER J2 

The configuration of pins 5 and 6 on header J2, located inside the VME/10 
chassis, determines whether the power-up reset (PWRT) self-test is performed 
upon system initialization. It also allows generation or suppression of the 
"Booting from ROM: xxxx" message at the close of the ROMBOOT procedure (refer to 
paragraph 2.10). When a jumper is placed on pins 5 and 6 of J2, as in initial 
VME/10 factory configuration, the PWRT self-test is performed during the 
cold-start and warm-start sequences described in the following paragraphs. This 
jumper also allows display of the ROMBOOT message when control is passed to 
TENbug. When the jumper is removed from pins 5 and 6 of J2, no PWRT self-test 
is performed and the ROMBOOT message is suppressed. 



2.5 ENTERING TENbug DURING SYSTEM POWER-UP (COLD START) 

Invoking TENbug using the cold-start technique causes the contents of all memory 
to be destroyed. It also causes the VME/10 system to place the contents of 
addresses $F00000-$F00003 into the supervisor stack, and the contents of 
$F00004-$F00007 into the program counter. These addresses are located in system 
ROM. Figure 2-1 illustrates a flow diagram of the VME/10 cold-start procedure. 
The following paragraphs assume that a jumper is present on pins 5 and 6 of J2, 
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FIGURE 2-1. Flow Diagram of VME/10 Cold Start 
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2.5.1 Cold Start without MVME400 Module 

This method allows the user to enter TENbug during system power up when no 
MVME400 (Dual RS-232C Serial Port) module is present in the VME card cage. 

a. Set the KYBD LOCK key switch on the operator panel to the unlocked 
position, 

b. Apply power to chassis. When power is applied, the PWRT self-test is 
initiated, 

c. If PWRT self -test indicates no errors, the TENbug prompt and version 
nurhber will appear on the screen: 

TENbug 2.x > 



2.5.2 Cold Start with MVME400 Module 

This method allows the user to enter TENbug during system power up when an 
MVME400 module is^ present in the VME card cage. 

a. Set the KYBD LOCK key switch on the operator panel to the unlocked 
position. 

b. Apply power to chassis. When power is applied, the PWRT self-test is 
initiated. 

c. If PWRT self- test indicates no errors, the firmware displays a prompt 
without a version number. 

TENbug > 

It then awaits input from the first device to be used, which will be the 
console terminal. 

d. Select the terminal to serve as the console keyboard. This device will 
remain the console device until the VME/10 is restarted with a warm- or 
cold-start procedure. 

e. Press the carriage return key on the chosen keyboard to obtain the 
complete TENbug proi^pt with version number. 

TENbug 2.x > 
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2.6 ENTERING TENbug VIA SIMULATED COID START 

A cold-Start sequence (the equivalent of turning the power off and on) can be 
simulated when the KYBD LCX^K switch is set to the unlocked position. Use the 
RESET and ABORT buttons as follows: 

a. Press and hold RESET button, 

b. Press and release ABORT button. 

c. Release RESET button, 

d. When an MVME400 module is not present in the VME card cage, go to step c. 
of paragraph 2,5.1, 

e. VJhen an MVME400 module is present in the VME card cage, go to step c. of 
paragraph 2.5,2, 



Like the true cold-start sequence, this method will erase all memory contents 
and will execute the PWRT self-test. It will also place the contents of ROM 
addresses $F00000-$F00003 into the supervisor stack, and the contents of 
$F00004-$F00007 into the program counter. In other words, it translates the ROM 
at $F00000 to location $000000, so that the RAM at location 0 is mapped out of 
the system. 



2.7 ENTERING TENbug WITHOUT DESTROYING MEMORY CONTENTS (WARM START) 

This method allows the user to enter TENbug without destroying the contents of 
the VME/10 memory. However, using the warm-start sequence (pressing RESET only) 
causes the VME/10 to place the contents of RAM addresses $0 through $3 into the 
supervisor stack, and the contents of $4 through $7 into the program counter. 
It also sets the processor to supervisor state. 

CAUTION 

BECAUSE THESE ADDRESSES ARE LOCATED IN RAM, 
THE USER CAN OVERLAY ANY DATA OR ADDRESS 
INTO THESE REGISTERS, IN WHICH CASE RESULTS 
ARE INDETERMINATE, 



a. Set the KYBD LOCK key switch to the unlocked position. 

b. Press the RESET button on the operator panel. 

c. When an MVME400 module is not present in the VME card cage, go to step c, 
of paragraph 2.5.1. 

d. When an MVME400 module is present in the VME card cage, go to step c. of 
paragraph 2.5.2. 
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2.8 TENbug COMMAND OPERATION 

After TENbug initialization, the computer waits for a command line input from 
the console terminal. A standard input routine controls the system while the 
user types a line of input. Command processing begins only after the line has 
been entered, followed by a carriage return. When a proper conmand is entered, 
the operation continues in one of two basic modes. If the command causes 
execution of a user program, the TENbug firmware may or may not be reentered, 
depending on the discretion of the user. For the alternate case, the command 
will be executed under control of the TENbug condition. During command 
execution, additional user input may be required, depending on the command 
function. 

Figure 2-2 illustrates the VME/10 operational mode. 



NOTE 

If a command causes the system to access an unused address 
(i.e., no memory or peripheral devices are located at that 
address) , a bus trap error will occur. Unless default 
vectors have been overwritten, the terminal displays a trap 
error message and the contents of all MC68010 registers. 
Control is then returned to the TENbug monitor. A bus trap 
error also occurs if the system attempts to write to ROM. 



2.9 WHEN TENbug PROMPT FAILS TO APPEAR 

Refer to Chapter 2 of the VME/10 Microcomputer System Diagnostics Manual for 
instructions if the PWRT sequence fails and/or no TENbug prompt appears during 
one of the procedures listed in this chapter. 



2.10 ROMBOOT FACILITY 

When the VME/10 completes its preliminary initialization, pins 5 and 6 of header 
J2 are checked to determine whether the PWRT self-test should be executed. If 
not, TENbug receives control immediately; if so, it receives control after 
execution of the self-test. After control is passed to TENbug, a routine in ROM 
can be executed (if the ROM meets the format requirements) . This feature, which 
provides the ability to transfer control to an external ROM routine at power up 
or cold start, is named ROMBOOT. 

A module requiring the use of ROMBOOT linkage must meet the following three 
requirements: 

a. The routine must be located in the VME/10 memory map between addresses 
$180000 to $FFEOOO. 

b. The ASCII string "BOOT", followed by some linkage convention information, 
must be located on an 8K boundary within the memory range. 

c. The routine must pass a checksum test applied from the first to the last 
byte of the module. 
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FIGURE 2-2. Flow Diagran of TENbug Operational Mode 
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NOTE 



There is no requirement that the routine reside 
in ROM? it can be loaded into a RAM module and 
then invoked by a cold start. 



To prepare a module for ROMBOOT, the CS command must be used. When the module 
is ready it can be loaded into RAM, and the checksum generated, installed, and 
verified with the CS canmand. (Refer to the Checksum command description and 
examples.) 

The format of the beginning of the routine is as follows: 



MODULE OFFSET LENGTH 



$00 



$04 
$08 
$0C 



CONTENTS 



BOOT 



Entry address 
Routine Length 
Routine name 



DESCRIPTION 

ASCII string indicating possible 
routine; checksum must be zero, 
too. 

Longword offset from 8K boundary. 

Longword, includes "BOOT to end". 

ASCII string containing routine 
name (only four bytes displayed) . 



By convention within Motorola, the last three bytes of ROM contain the firmware 
version number, checksum, and socket number. In this environment, the length 
would contain the ASCII string "BOOT" (that was on the 8K boundary) , through and 
including the socket number; however, the user wishing to make use of ROMBOOT 
does not have to fill a complete ROM. Any partial amount will be accepted, as 
long as the length reflects where the checksum will be correct. 

The sequence used to validate a routine for execution begins at the high limit 
of memory first and checks for the "BOOT" indicator. Three events are of 
interest for any location being tested. 

a. If there is no memory at that location, a bus error is generated. The 
ROMBOOT routine is required to move on to the next 8K boundary. 

b. If memory is present, but the first four bytes do not contain BOOT, the 
ROMBOOT routine is required to move on to the next 8K boundary. 

c. If the ASCII string "BOOT" is located on an 8K boundary, we are not 
assured that the routine is really one meant to gain control at power up 
or cold start. To verify that this is the case, the bytes starting from 
the 8K boundary through the end of the routine (as defined by the 8K 
boundary + 4-byte length at offset $8) are run through the self-test 
checksum routine. If both the even and odd bytes are zero, chances are 
very good that the routine was meant to be used for ROMBOOT. 
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The bus error routine address is replaced at location $8 before control is 
passed to the routine at the point specified within the header (8K boundary + 
contents of offset $4) • A JSR instruction which loads the address of the next 
instruction within the ROMBOOT routine on the stack allows the routine to return 
control to TENbug following some temporary task such as initialization. 

In most cases, right before control is actually given to the ROM routine, a 
message displaying the first four bytes of the routine name (8K boundary + 
contents of $C) is placed on the terminal in the following form: 

Booting from ROM: xxxx 

where xxxx are the first four bytes of the name. 

If pins 5 and 6 of header J2 are not jumpered, the message is suppressed and the 
PWRT self-test programs are not run. This might be desirable if, for example, 
no CRT or disk was present on a system. 

The following example returns control to TENbug 2.x after placing a test pattern 
in a portion of RAM. Notice the use of the CS conmand to calculate and verify 
the checksum. 
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SAMPLE ROMBOOT ROUTINE - Procedure for preparing checksum 



TEMbug 2.x > MP 0+R3 40 



000000+R3 


42 4F 4F 54 00 


00 


00 


14 00 


000010+R3 


41 F9 00 01 FO 


00 


20 


3C 00 


000020+R3 


FF FC 4E 75 01 


01 


00 


00 10 


000030+R3 


FF FF FF FF FF 


FF 


FF 


FF FF 


TENbug 2.x > M 10+R3;DI 








000010+R3 


41F90001F000 






LEA.L 


000016+R3 


203C0000EFFF 






MOVE.L 


00001C+R3 


1100 






MOVE.B 


00001E+R3 


51C8FFPC 






DBF.L 


000022+R3 


4E75 






RTS 


000024+R3 


0101 






BTST 


000026+R3 


0000 






DC.W 


000028+R3 


1008 






DC.W 


00002A+R3 


FFFF 






DC.W 


00002C+R3 


FFFF 






DC.W 


00002E+R3 


FFFF 






DC.W 


000030+R3 


FFFF 






DC.W 



TENbug 2.x > CS 0+R3 2A+R3 
PHYSICAL ADDRESS=00020000 0002002A 
(EVEN ODD)=4B34 



00 00 A6 54 65 73 74 BOOT &Test 

00 EF FF 11 00 51 C8 Ay..p. <..o...QH 

08 FF FF FF FF FF FF .|Nu 

FF FF FF FF FF FF FF ................ 



$0001F000,A0 ? (CR) 
#61439,D0 ? (CR) 
DO,- (AO) ? (CR) 
D0,$02001C? (CR) 

? (CR) 
DO^Dl ? (CR) 
$0000 ? (^) 

$1008 ? (^) 

$FFFF ? (CR ) 

$FFFF ? (CR) 

$FFFF ? (CR) 

$FFFF ? . 



TENbug 2.x > M 26+R3;W 
000026+R3 0000 ? 4B34. 

TENbug 2.x > CS 

PHYSICAL ADDRESS=00020000 0002002A 
(EVEN ODD) =0000 



Load ROMBOOT routine in RAM to 
generate checksum. 

Display (in hex) contents of RAM 
containing the routine. 



Display same memory using 
disasssnbler/assembler. This anall 
routine loads a test pattern into 
RAM and returns to TENbug 2.x. 



0101 is revision niitiber of routine. 
0000 is value to be replaced by 
checksum. 

1008 are socket ID'S U16 and U108. 

NOTE: The socket ID*s are the last 
two bytes of the routine. 



Calculate checksum from byte 0 to 
byte 2A (end of routine +1) . Note 
that location where checksum is to 
be placed must be $0000 to produce 
correct checksum bytes. 

Enter calculated checksums with MM 
command. 

Issue CS command to verify zeros 
are produced. Notice the operands 
from the previous CS command are 
retained for verification. 



SAMPLE RO^^BOOT ROUTINE - Procedure for preparing checksum (cont'd) 



TENbug 2.x > MP 0+R3 40 

000000+R3 42 4F 4F 54 00 00 00 14 00 

000010+R3 41 F9 00 01 FO 00 20 3C 00 

000020+R3 FF FC 4E 75 01 01 4B 34 10 

000030+R3 FF FF FF FF FF FF FF FF FF 

TENbug 2,x > 



00 00 A6 54 65 73 74 BOOT SOfest 

00 EF FF 11 00 51 C8 Ay. .p. <..o...QH 

08 FF FF FF FF FF FF .|Nu..K4 

FF FF FF FF FF FF FF •«•.•••••••••••• 



Display memory one more time with 
checksum in place. 



2.11 OFFLINE KEYBOARD COMMAND 

Pressing the SEL key places the VME/10 keyboard and local CRT display into local 
mode (offline to TENbug commands) . Then uppercase, lowercase / and special 
characters are displayed on the local VME/10 CRT display when they are entered 
on the keyboard. To exit local mode, press the SEL key again; TENbug will 
resume control of the keyboard and CRT display. 

Five function keys provide support for the character attributes as follows: 

Fl Character blink 

F2 Character underline 

F3 Character inverse video 

F4 Character protect 

F5 Character color 

Functions controlled by keys Fl through F4 are enabled by pressing the 
appropriate function key, whereas pressing SHIFT and the same function key 
disables the function. The character-color function increments through eight 
colors or shades of green each time the F5 key is pressed. 

The offline feature is particularly useful in building sample screens for 
applications under development. 
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CHAPTER 3 



COMMAND LINE FORMAT 



3.1 INTRODUCTION 

Coinmands are entered in buffer-organized fashion. A standard input routine 
controls the syston while the user types a line of input. Processing begins 
only after the carriage return has been entered. 

Many primitive commands can be altered by the options field. This provides the 
user several extensions to the primitive ccrtimands. 

Several commands are set and reset pairs; i.e., rather than having two primitive 
conmands, the form NO is added as the first two characters of the command. For 
example, the set breakpoint canmand is BR, and the reset breakpoint conmand is 
NOBR. 

Command line formats are presented in a modified Backus-Naur Form (BNF) . 
Certain symbols in the syntax may be used, where noted, in the real I/O. Others 
are metasymbols, which are used for definition only and are not entered by the 
user. These metasynbols and their meanings are as follov^: 

< > Angular brackets enclose a symbol, known as a syntactic variable, 
that is r^laced in a command line by one of a class of symbols it 
represents . 

I This symbol indicates that a choice is to be made. One of several 

symbols, separated by this symbol, should be selected. 

[ ] Square brackets enclose a symbol that is optional. The enclosed 
symbol may occur zero or one time. 

[ ]... Square brackets followed by periods enclose a symbol that is 
optional/repetitive. The symbol may appear zero or more times. 



In the examples given in the following paragraphs, operator entries are shown 
underscored for clarity only — i.e., the underscore is not to be typed. 
Operator entries are followed by a carriage return unless otherwise specified. 
The carriage return is not shown in examples except where it is the only entry, 
in which case it is shown as ( CR ) • 
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3.2 TENbug COMMAND LINE FORMAT 

The format of the TENbug command line is: 

TENbug 2.x > [NO] <cQmmand> [<port nutriber>] [<parameters>] [;<options>] 
where: 

TENBUG 2.x > Is the basic TENbug prcrnpt. For prompt variations, see 
appropriate command descriptions. 

NO Is the negative form (opposite) of primitive coitinand. 

command Is the primitive command. 

port number Specifies the applicable device port. 

parameters Can be of the form <expression> or <address> and are usually 
separated by spaces. 

options ^)ecifies applicable options; multiple options may be 

selected . 



The basic ccxnmand form consists of the primitive cotnmand field and the 
parameters field, although some primitives do not require parameters. Some 
primitive commands allow specification of alternate device ports. The 
additional command negation and options field can modify the primitive comnriand. 

If an option exists for a command, a semicolon (;) plus <options> field (s) are 
added to the ccxnmand. Thus, several extensions can be provided to the user. 

3.2.1 Expression as a Parameter 

An <expression> can be one or more numeric values separated by the arithmetic 
operators plus (+) or minus (-) . Numbers are assumed hexadecimal except for 
those preceded by an ampersand (&) , which are decimal. In the assembler, 
numbers are assumed decimal unless preceded by a dollar sign ($) . 

3.2.2 Address as a Parameter 

Many commands use <address> as a parameter. The syntax accepted by TENbug is 
the same as that accepted by the assembler, plus a memory indirect mode. Also, 
contained within TENbug are eight offset registers designated RO through R7. 
These registers are software registers only, and are provided for easier 
debugging of relocatable code. 
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3. 2. 2,1 Mdress Fonnats. 



FORMAT 



EXAMPLE 



DESCRIPTON 



expression 



expr es s ion+of f se t 



express ion+off set 



(A@) 
(A@,D(a) 

expression (A@) 

expression ( A@ ,D(a) 
expression (A@ , A@) 

[expression] 



140 Absolute address (offset register zero is 

added) • 

130+R5 Absolute address plus offset register five (not 
an assembler-accepted syntax) . 

150+R7 Absolute address (offset register seven is 

always zero; not an assenibler-accepted 
syntax) • 

(A5) Address register indirect. 

(A6,D4) Address register indirect with index, 

120 (A3) Register indirect with displacement. 

110(A2,D1) Address register indirect with index plus dis- 
placement. 

[100] Memory indirect (not an asseinbler-accepted 
syntax) . 



3.2.2.2 Offset Registers . Eight software registers (not actually hardware 
configured) are used to modify addresses contained in TENbug conmarKas. The 
first seven registers (.R0-.R6) are used as general-purpose offsets, while .R7 
(the eighth register) is always zero. The contents of the registers can be 
displayed by the offset coitmand (OF) , paragraph 4.2.29, and modified by the 
.<register> command, paragraph 4.2.1. 

The offset registers are always reset to zero at power up. Thus, if their 
contents are not changed, the registers will have no effect on the entered 
address . 



Unless another offset is entered, each command that expects an address parameter 
automatically adds offset RO to the entered address — that is, if RO = 1000, 
the following cotnmands are the same: 

BR 10 (10 + 1000) RO is added by default 

BR 10+RO (10 + 1000) 

BR 1010+R7 (1010 + 0) R7 is always zero 

The physical address for each of these commands is 1010. 

Offset RO is automatically added to the offset registers any time they are 
modified. The only exception to this is when another offset register is 
specifically added. Offset registers may be set to zero by adding R7 (always 
zero) to zero. 



EXAMPLE: 



.RO 


0+R7 


(RO 




0 + 


0 


= 0) 




RO set 


to 


zero 


.Rl 


8 


(Rl 




8 + 


0 


= 8) 




Offset 


RO 


is zero, Rl 


.RO 


100 


(RO 




100 


+ 


0 = 


100) 


Offset 


RO 


added 


.RO 


200 


(RO 




200 


+ 


100 


= 300) 


Offset 


RO 


added 


.R3 


100+Rl 


(R3 




100 


+ 


8 = 


108) 


Offset 


RO 


not added 


.RO 


0+R7 


(RO 




0 + 


0 


- 0) 




RO set 


to 


zero 
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3.3 COMMAND VERIFICATION 



As an aid to the user, TENbug displays for most commands its interpretation of 

the values entered as expression and address parameters. The results are 

displayed in either physical or logical format, depending upon the command 
entered . 

EXAMPLES ; 

TENbug x.y > .RO 1000 
TENbug x.y > .PC 0 



Logical Format Example 
TENbug x.y > MP 0 

000000+RO 4E 71 4E 71 4E 71 4E 71 4E 71 00 00 OF 90 00 00 NqNqN^qNq 



Physical Format Example 

TENbug x.y > GT 8 
PHYSICAL ADDRESS=00001008 
PHYSICAL ADDRESS=00001000 

AT BREAKPOINT 

PC=00001008 SR=2700=.S7 USP=00012C5C SSP=0000085E VBR=00000000 SFC=1 DFC=0 

DO-7 00304E71 00001000 4E711000 00000000 00004E71 0000002C 00001008 00000000 
AO-7 000004DA 00000000 00001000 0000053A 00001002 00000551 00000551 0000085E 
PC=000008+R0 4E71 NOP 



Commands entered are also checked for validity. For example, specifying an 
address parameter v^ich would result in an error may cause the message INVALID 
ADDRESS=xxxxxxxx to be displayed on the console terminal. A table of TENbug 
error messages is provided in Appendix B. 
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CHAPTER 4 



COMMAND SET 



4.1 INTRODUCTION 

Chapter 4 describes the command line syntax and provides one or more examples 
for each command in the TENbug command set. Table 4-1 lists TENbug command 
mnemonics by type. For SYSTEM V/68-specif ic information about TENbug commands, 
refer to paragraph 1,4. 



TABLE 4-1. TENbug Commands by Type 



COMMAND 
MNEMONIC 


DESCRIPTION 


MD 


Memory display/disassembly 


MM 


Memory modify/disassembly/assembly 


MS 


Memory set 


.A0-.A7 


Display/set address register 


.D0-.D7 


Display/set data register 


.DPC 


Display/set destination function code 


.PC 


Display/set program counter 


.SPC 


Display/set source function code 


.SR 


Display/set status register 


.SSP 


Display/set supervisor stack pointer 


.US 


Display/set user stack pointer 


.YBR 


Display/set vector base register 


DF 


Display formatted registers 


BF 


Block of memory fill 


HI 


Block initialize 


BM 


Block of memory move 


BS 


Block of memory search 


BT 


Block of memory test 


DC 


Data conversion 


.R0-.R6 

OF 


Display/set relative offset register 
Display offsets 
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TABLE 


4-1. TENbug Commands by Type (cont'd) 


COMMAND 




MNEMONIC 


DESCRIPTION 


BR 




NOBR 




GO 








GD 


Go direct execute program 


TR 


Trace 


TT 


Trace to temporary breakpoint 


PA 


Printer attach 


NOPA 


Detach printer 


BARS 








CH 








CRT 


^tod^fv CRT contirol tpq istt^T*? 






GR 


iyx o^xd y ^xci^iixv^o iAfitf. 1 


NOGR 


R^mnv^i {Tranih i r"C! RAM ■pT'om <5r'T'*a<an 


PF 


Port format 


TM 


Transparent mode 


VM 


Video map 


HE 


Help 


DU 


IXimp memory (S-records) 


LO 


Load (S-records) 


VE 


Verify (S-records) 






BO 




IOC 


I/O command for disk 


lOP 


I/O physical for disk 


lOT 


I/O teach for disk 



4.2 TENbug COMMANDS 

A complete description of each TENbug command is provided in the following 
paragraphs. Messages resulting from error conditions during comniand execution 
are described in Impend ix B. 
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4.2.1 Display/Set Register (.<register>) 



.<register> 



•<register> [<expression>] 

The .<register> commands allow the user to display or modify individual 
registers. Commands with a leading period and the registers displayed/altered 
by these commands are: 

.A0-.A7 address register 

.D0-.D7 data register 

.DFC destination function code (used with MC68010 MOVES instruction) 

.PC program counter 

.R0-.R6 relative offset register (software register) 

(refer to OF coitinand) 

.SPC source function code (used with MC68010 MOVES instruction) 

.SR status register (in the MC68010) 

.SSP supervisor stack pointer 

.USP user stack pointer 

.VBR vector base register 

EXAMPLE COMMENT 

TENbug 2.x > .PC Display program counter. 

.PC=OOOOOAOO 

TENbug 2.x > .A7 FOO Set address register 7 to $F00. 

TENbug 2.x > .Rl AOO Set relative offset register 1 to $A00. 

TENbug 2.x > OF 

RO-7 00000000 OOOOOAOO 00000000 00000000 00000000 00000000 00000000 00000000 

Display all relative offset registers. 

TENbug 2.x > DF 

PC=00000A00 SR=2700=.S7 USP=FFFFFFFF SSP=00000F00 VBR=00000000 SFC=2 DFC=7 

DO-7 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
AO-7 00000000 00000000 00000000 00000000 00000000 00000000 00000000 OOOOOFOO 
PC=000000+R1 41F81000 LEA.L $00001000, AO 

Display all formatted CPU registers. 
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4.2.2 Draw Graphics Bars Test Pattern (BARS and NOBARS) 



BARS 
NOBARS 



BARS 
NOBARS 



The BARS command provides a graphics test pattern that can be used to 
familiarize the user with a few of the graphics facilities. BARS will create a 
color or green scale consisting of eight horizontal and eight vertical bars. 
Each bar in a given axis is a different color or shade of green. Where a 
horizontal bar intersects a vertical bar, the result is the Exclusive~OR of the 
two colors or shades. 

For more detailed information about the control registers and graphics RAM, 
refer to the VME/10 Microcomputer System Reference Manual. 

If NOBARS is entered, the graphics RAM is cleared. If BARS is entered following 
a previous BARS command, the system automatically clears graphics RAM before 
redrawing the test pattern. If graphics RAM has been enabled (using the GR 
command) , the test pattern can be seen while it is being drawn. 

This diagnostic command will support high- or low-resolution mode, with the only 
observable difference being that the low-resolution version can be drawn in less 
time due to the reduced amount of RAM involved. For more information about 
changing from high- to low-resolution mode refer to the description of the VM 
command • 



See also: [NO]CH, CRT, 
EXAMPLE 

TENbug 2.x > GR 
TENbug 2.x > BARS 

TENbug 2.x > VM 
TENbug 2.x m> GR 
TENbug 2.x m> NOCH 



[NO]GR, VM 
COMMENT 



TENbug 2.x m> BARS 
TENbug 2.x m> GR 2 

TENbug 2.x m> NOBARS 
TENbug 2.x m> CH 
TENbug 2.x m> VM 



Display the contents of graphics RAM. 

Execute the graphics test pattern command. Notice 
both graphics and character data are displayed. 

Change from high- to low-resolution mode. 

Enable graf^ics again. 

Disable the character RAM. 

NOTE 

The following commands will not be visible on the 
CRT display after execution of the NOCH command. 

Draw test pattern, a little quicker this time. 

Allow only the color controlled by bit 2 in control 
register 1. 

Clear graphics RAM. 

Restore the character display. 

Change from low- to high-resolution mode. 
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4.2.3 Block Fill (BF) 



BF 



BF <addressl> <address2> <pattern> 



The BF canmand fills a specified block of memory with a specified binary pattern 
of word size. A word boundary (even address) must be given for the starting 
<addressl> and ending <address2> of the block. The pattern word may be 
expressed in hexadecimal (default), decimal, octal, or binary format. Refer to 
the DC ccmmand for symbols used to denote numeric type. If a pattern of less 
than word size is entered, the data is right- justified and leading zeros are 
inserted by TENbug. 



EXAMPLE 

TENbug 2.x > MP 900 

000900 FF FF 00 00 FF FF 00 00 FF FF 00 04 FF FF 00 00 

TENbug 2.x > BF 900 90E 4E75 
PHYSICAL ADDRESS=00000900 0000090E 

TENbug 2.x > MP 900 

000900 4E 75 4E 75 4E 75 4E 75 4E 75 4E 75 4E 75 4E 75 NUNUNUNUNUNUNUNU 
TENbug 2.x > 
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4.2.4 Bootstrap Halt (BH) 



BH 



BH [<device>] [,<controller>] 

where: 

device Is a single hexadecimal digit (0-3) specifying the device to 

be used (default = 0) . 

controller Is a single hexadecimal digit (0) specifying the controller 
to which the device is connected (default = 0) . 



The BH command causes data from disk to be loaded into memory and program 
control to be given to TENbug. If device and/or controller are not specified, 
device 0 and controller 0 are used. 

This command works the same as BO, except that control is transferred to TENbug. 



See also: BO 



EXAMPLE COMMENT 

TENbug 2.x > BH Boot Halt from default drive 0, default controller 0. 

Booting from: SYS (Message appears only if first four bytes of volume 

ID are not null.) 

PC=00001694 SR=2700=.S7 USP=FFFFFFFF SSP=00040E00 VBR=00000000 SFC=2 DFC=7 

DO-7 00000000 00000000 00000048 4D453455 4D505500 A987EDCB 00000000 0007FFFE 
AO-7 OOFICODI 00001694 0000067A 00F01E2C 00F01350 00000550 00000550 00040E00 
PC=001694 46FC2700 MOVE.W #9984rSR 

TENbug 2.x > 



TENbug 2.x > BH 2 Boot Halt from drive 2, default controller 0. 

Booting from: TEN (Message appears only if first four bytes of volume 

ID are not null.) 

PC=000025D8 SR=2700=.S7 USP=FFFFFFFF SSP=000014D8 VBR=00000000 SFC=2 DFC=7 

DO-7 00000002 00000000 OOOOOOAC 4D453455 00000000 00000010 00000000 0007FFFE 
AO-7 OOFICODI 000025D8 00000682 00F01E2C 00F01350 00000552 00000552 000014D8 
PC=0025D8 41F814D8 LEA.L $00001408, AO 

TENbug 2.x > 



NOTE 

To use the BH comnand, a valid stack value must 
be in locations $0-$3 of the file being loaded. 
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4.2.5 Block Initialize (BI) 



BI 



BI <addressl> <address2> 



The BI command initializes word parity in a specified block of monory consisting 
of <addressl> through <address2>. No data in any word is changed if parity in 
the word is correct. If parity in a word is incorrect, the characters "m?" 
($6D3F) are written in that word to force correct parity. If the parity cannot 
be set in one or more words, the message BUS TRAP ERROR is displayed on the 
console. The BT (Block Test) command may be used to isolate the failure (s). 



NOTE 

Both addresses must be on word boundaries. 



See also: BT 



EXAMPLE 

TENbug 2.x > BI 44000 4FFFE 
PHYSICAL ADDRESS=00044000 0004FFFE 

TENbug 2.x > 
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4.2.6 Block Move (BM) 



BM 



BM <addressl> <address2> <address3> 

where: 

<addressl> Is the starting address of the source memory block. 

<address2> Is the ending address of the source memory block. 

<address3> Is the starting address of the destination memory block. 

The BM ccromana is used to move (duplicate) blocks of memory fran one area to 
another. 



EXAMPLE 

TENbug 2.x > MP BOO A; PI 
OOOBOO 1018 
000B02 OCOOOOOO 
000B06 67F8 
000B08 4E75 

TENbug 2.x > MP AOO A; PI 
OOOAOO FFFF 
000A02 OOOOFFFF 
000A06 0020FFFF 

TENbug 2.x > BM BOO B09 AOO 
PHYSICAL APPRESS=OOOOOBOO 00000B09 
PHYSICAL APPRESS=00000A00 

TENbug 2.x > MP AOO A;PI 
OOOAOO 1018 
000A02 OCOOOOOO 

000A06 67F8 BEQ.S 
000A08 4E75 RTS 



MOVE.B 
CMP.B 
BEQ.S 
RTS 



PC.W 
OR.B 
OR.B 



(AO)+,PO 

#0,P0 

$000B00 



$FFFF 

#-lrPO 

#-l,-(AO) 



MOVE.B (AO)+,PO 
CMP.B #0,P0 

$000A00 



TENbug 2.x > 
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4.2.7 Bootstrap Operating System (BO) 



BO 



BO [<device>] [,<controller>] [,<string>] 



where: 



device 



Is a single hexadecimal digit (0-3) specifying the device to 
be used (default = 0) . 



controller 



Is a single hexadecimal digit (0) specifying the controller 
to which the device is connected (default = 0) . 



string 



Is an optional ASCII character string that is passed to the 
program being loaded from the specified device and 
controller. 



The function of the BO command is to access a program on disk, transfer it into 
memory space, and give control to that program. Where to find the program and 
where in mQ[nory to store the program is contained in sector 0 of the disk 
corresponding to the specified device and controller. If the device and 
controller are not specified, the default value zero is used for each. 

The following sequence occurs when the BO conmand is executed: 

a. Starting at sector 0 (the volume ID) , 256 bytes are read and transferred 
into TENbug workspace RM. 

b. If the volume ID (locations $0 through $3) is not null, these four ASCII 
bytes will be displayed as follows: 

Booting from: SYS 

Where SYS is the volume ID. If null, the display is suppressed. 

c. Motorola ID locations $F8-$FF are read to ensure that they contain either 
"EXORMACS" or "MOTOROLA". 

d. The location of the program to be loaded and its destination in memory 
are identified by examining the first sector at the following locations. 

LOCATIONS CONTENTS 



e. The location of the disk configuration area is identified by examining 
volume ID locations as shown: 

LOCATIONS CONTENTS 



$14-$17 
$18-$19 
$1E-$21 



First 256-byte sector to transfer 
Number of sectors to transfer 

ASdress of first destination byte (first memory address) 



$90-$93 



Sector address of the media configuration parameters 
(normally sector 1) 



$94 



Length of the configuration area (normally one 256-byte 
sector) 



BO 



If there is no media configuration area specified, default media 
configuration values are used to read the disk. If there is a media 
configuration area specified, then that VERSMos sector is read into the 
TENbug workspace, and these values are used to read the disk. Refer to 
Appendix C for additional information. 

f . The program is read and transferred to its memory destination. 

g. The status register is updated to reflect supervisor mode and interrupt 
level 7. 

h. The stack pointer is loaded from locations $0-$3 relative to the 
destination memory. 

i. The program counter is loaded from locations $4-$7 relative to the 
destination memory. 

The registers are set up as defined below, and the program loaded by the BO 
canmand now has control of execution. 



DO... DRIVE NUMBER 

D1...IPC NUMBER 

D2. . .DISK CONFIGURATION CODE 

D3...FLAG FOR IPL; 'ME4U' = USE BUGS' DISK READ ROUTINE 

AO... ADDRESS OF DISK CONTROLLER BOARD 

Al... ADDRESS OF PROGRAM JUST LOADED 

A2... ADDRESS OF DISK CONFIGURATION DATA 

A3... ADDRESS OF BUGS' DISK READ ROUTINE 

A4... ADDRESS OF THE DEBUGGER ENTRY POINT ("MACSBUG") 

A5... START OF TEXT 

A6...END OF TEXT4-1 (WHERE THE NEXT CHARACTER WOULD GO) 
A7... STACK OF PROGRAM JUST LOADED 
SR. . .SUPERVISOR MODE AND LEVEL SEVEN 

These registers can be used by IPL to load the file identified by the string 
field. If a string field is specified on the BO conimand line, registers A5 and 
A6 point to the first and last plus one characters of the string. If no string 
is specified, register A5 = A6. The file name may be followed by a semicolon 
and either or both of the options L=$<address> or H. Specifying H causes 
control to be returned to TENbug, rather than to the specified program. 

Refer to the discussion of the bootload file, IPL.SY, in the M68000 Family 
VERSAdos System Facilities Reference Manual. 
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BO 



The devices and controllers currently supported by TENbug are assigned as 
follows: 



DEVICE # 



DESCRIPTION 



Winchester hard disk 
Winchester hard disk 
5 1/4" Winchester floppy disk 
5 1/4" Winchester floppy disk 



CONTROLLER # 



DESCRIPTION 



FWINl disk controller 



EXAMPLE 



COMMENT 



TENbug 2.x > BO 
Booting from: SYS 



Boot from the default drive and 
(drive is 0, controller is 0). 
Note: The volume ID is SYS. 



controller. 



TENbug 2.x > BO 2 
Booting from: TEN 



Boot from drive 2 (first floppy) on the 
default controller (EWINl number 0) . 
Note: The volume ID is TEN. 



TENbug 2.x > BO ,,0.VME10.KBD.SY 
Booting from: SYS 



Boot from default device 0 on the RVINl 
(default controller 0) and pass the ASCII 
string that will request the program named 
KBD.SY under catalog VMElO, account number 0/ 
to be loaded by the IPL program. (IPL was 
the program booted into menory with the BO 
contimand . ) 

Note: The volume ID is SYS. 
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4,2.8 Breakpoint Set and Remove (BR and NOBR) BR 

NOBR 

BR (display only) 

BR [ <addr ess> [ ; <count> ] ] [<address> [ ; <count> ] ] . . . 
NOBR [<address>[<address>] ..,] 



When encountered, a breakpoint causes target program execution to stop and 
control to be transferred to TENbug. The BR ccramand may be used without 
parameters to cause display of current breakpoint addresses. The BR <address> 
cotranand sets one or more addresses into the breakpoint add:^ess table. This 
table can hold up to eight breakpoint addresses. Multiple breakpoints (up to 
eight) may be specified with one call of the Breakpoint command. Addresses 
should be on even word boundaries. The range of <count> is a 32-bit integer. 

The breakpoints are inserted into the target program when execution is called 
via a GO or GT command. The illegal instruction $4AFB is inserted at the 
addresses specified by the table. During execution of the program, a breakpoint 
occurs whenever this instruction is encountered. If program control is lost, 
control may be regained via the RESET or the ABORT button, AiBORT is preferred 
because use of the RESET function may leave breakpoints ($4AFB) in the user 
program, whereas ABORT will recover properly (refer to Appendix A) . 

While executing a Trace command, the breakpoint addresses are monitored (i.e., 
the illegal instruction $4AFB is not placed in memory) . 

After stopping at a breakpoint, execution may be continued by typing the GO 
coranand. 

The NOBR command raiioves one or more breakpoints frcm the internal breakpoint 
table. The NOBR command without parameters eliminates all breakpoints. 



BR COMMAND FORMAT 

TENbug 2.x > BR 

TENbug 2.x > BR <address> 

TENbug 2.x > BR <address>;<count> 



DESCRIPTION 

Display all breakpoints. 
Set a breakpoint. 

Set a breakpoint with a count. Count is 
decremented each time the breakpoint is 
encountered until <count> =0. Execution 
stops as soon as count is decremented to 
zero. Thereafter, execution will stop 
each time the breakpoint is reached. 



NOBR COMMAND FORMAT 

TENbug 2.x > NOBR 

TENbug 2.x > NOBR <address> 



DESCRIPTION 

Clear all breakpoints. 

Clear a specific breakpoint. 



See also: GT, TT 
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EXAMPLE 

TENbug 2.x > .R4 4000 

TENbug 2.x > BR 1010 2000; 5 2040 4000 

BREAKPOINTS 
001010 001010 
002000 002000; 5 
002040 002040 
000000+R4 004000 

TENbug 2.x > NOBR 1010 2040 

BREAKPOINTS 
002000 002000;5 
000000+R4 004000 

TENbug 2.x > NOBR 

BREAKPOINTS 

TENbug 2.x > 



4.2.9 Block of Memory Search (BS) 



BS 



BS <addressl> <address2> '<literal string>* 

BS <addressl> <address2> <data> [<mask>] [;<option>] 



The BS command has two modes: literal string search and data search. Both modes 
scan memory beginning at <addressl> through <address2>f looking for a match. 

The literal string mode is initiated if a single quote (') follows <address2>. 
The ASCII literal string can include lowercase letters. If a single quote does 
not follow <address2>r data search mode is assumed. In the data search mode, 
the optional mask (if used) is ANDed to data. The default mask is all ones. 
The options supported are: 

;B byte 
;W word 
;L longword 

The default is byte. 

In both modes of the BS connmand, if the search finds matching data, the data and 
the address (es) are displayed. If the search is in data search mode with a 
mask, and data is found that matches the data after the mask is ANDed, the data 
from memory before applying the AND mask is displayed. 



EXAMPLE 

TENbug 2.x > MD 41FF0 15 

OOIFFO FF FF FF FF FF FF FF FF FF FF 

002000 43 43 45 45 00 00 00 00 00 00 

TEttoug 2.x > BS 41FF0 4200F 'CC' 
PHYSICAL ADDRESS=00001FF0 0000200F 
002000 'CC 

TENbug 2.x > BS 41FF0 4200F 34 ;W 
PHYSICAL ADDRESS=00001FF0 0000200F 

TENbug 2.x > BS 41FF0 4200F 03 OF 
PHYSICAL ADDRESS=00001FF0 0000200F 

002000 43 

002001 43 

TENbug 2.x > BS 41000 47FFE 4AFB;W 
PHYSICAL ADDRESS=00001000 00007FFE 
001000 4AFB 

TENbug 2.x > md 10000 30 
010000 54 68 69 73 20 69 73 20 61 
010010 65 20 66 6F 72 20 74 68 65 
010020 60 61 6E 64 2E 20 20 20 20 



COMMENT 



FFFFFFFFFFFF 

00 00 00 00 00 00 CCEE 

Successful search for literal string 
»CC'. 



Unsuccessful search for word-length data 
(with default mask) . 

Successful search for byte- length data, 
with four most significant bits masked. 



Successful search for "leftover" 
breakpoints . 



20 6D 65 73 73 61 67 This is a messag 
20 42 53 20 63 6F 6D e for the BS com 
20 20 20 20 20 20 20 mand. 

Display of memory that will be searched 
for lowercase letters. 
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BS 



TENbug 2.x > bs 10000 20000 'is' Block Search the address range for ASCII 

PHYSICAL ADDRESS=00010000 00020000 'is'. 
010002 'is' 

010005 'is' Successful search finding tMO occurrences. 

TENbux 2.x > 
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4.2.10 Block of Memory Test (BT) BT 



BT <addressl> <address2> 



The BT conimand provides a destructive test of a block of manory. A word 
boundary (even address) must be given for the starting <addressl> and ending 
<address2> of the block. If the test runs to completion without detecting an 
error, all mennory tested will have been set to zeros. 

Execution of this command may take several seconds for large blocks of memory. 

When a problem is found in a memory location, the address, the data stored, and 
the data read are displayed. Control is then returned to TENbug. 



See also: BI 



EXAMPLE 



COMMENT 



TENbug 2.x > BT 44000 47FFE 
PHYSICAL ADDRESS=00044000 00047FFE 



Successful memory test; no errors 
found. 



TENbug 2.x > BT 44000 4FFFE 
PHYSICAL ADDRESS=00044000 0004FFFE 
FAILED AT 048 OFE WROTE=FFFF READ=0000 



Unsuccessful memory test; error 
data is listed. 



TENbug 2.x > 



I 
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4.2.11 Character RAM Display (CH) 



CH 
NOCH 



CH [<bits>] 
NOCH 



The Character Display (CH) command provides access to specific bits within 
VME/10 control register 0 ($F19F05) . These bits determine whether the character 
RAM is displayed upon the CRT built into the YME/10. They are called the 
character disable bits, and must be off to allow the color or shade of green 
being used to draw the characters on the display. 

For more detailed information about the control registers, refer to the VME/10 
Microcomputer System Reference Manual. 

An optional <bits> parameter, 0-7, can be provided to replace the current 
configuration of bits 7, 6, and 5 of VME/10 control register 0. Default is 0 
(or all bits off) , allowing the character display to appear on the CRT. 

If NOCH is entered, the current values of bits 7, 6, and 5 within control 
register 0 are first saved, and then replaced by 7 (all bits on) . This removes 
any character data appearing on the screen. The data still resides in display 
RAM, unchanged; only the control register has been modified. 

To again display character data within display RAM, the CH command can be 
entered. The value saved when NOCH was last executed is restored. If the 
optional <bits> parameter is provided, however, the new value is used in place 
of the bit pattern previously saved. 

See also: [NO] BARS, CRT, [NO]GR, VM 
EXAMPLE COMMENTS 

TENbug 2.x > NOCH Remove any character data being displayed upon the 

built-in terminal. 

NOTE 

The keyboard is still operational; however, 
the data entered will not be displayed. 

TENbug 2.x > CH When CH is entered, all previous data that was on 

the screen (minus any lines that scrolled off the 
top) will be seen again. 
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4.2.12 CRT Control Register Modification (CRT) 



CRT 



CRT 



The CRT command provides an easy way to access the VME/10 control registers that 
affect the CRT display. Entering the CRT conmand begins a sequence of prompts 
that displays the current result of a particular control register bit(s) . The 
user is able to continue without changing the register, or to walk through a 
preselected set of parameters available for that bit within the register. 

For more detailed information about the control registers, see the VME/10 
Microcomputer System Reference Manual. 

The first prompt presented is the video amplifier duty cycle. Bit 3 within 
control register 0 is toggled on and off, selecting 50% or 100% duty cycle. 
Parameters can be toggled by pressing any character on the keyboard; the value 
continues to alternate with each press of a key. When the desired option is 
selected, pressing ENTER (or carriage return) moves on to the next parameter. 

The second prompt selects a cursor. In the same manner as before, three 
selections are presented: one for each character entered. When the cursor 
selection is complete, press ENTER (or carriage return) to proceed. Cursor 
selection is controlled by bits 5 and 6 within control register 1. 

The third prompt selects an optional blinking cursor. Blinking alternates with 
a steady cursor for each character entered. Bit 4 within control register 0 
controls cursor blink. After carriage control is entered the next prompt is 
displayed • 

The fourth and last option selected is inverse video. Bit 2 within control 
register 0 is alternately set or cleared to select inverse or normal video. 
When the selection is made, press ENTER and the following message will be 
displayed on the built-in terminal: 

Video Set 

TENbug 2.x > 

See also: [NO]BARS, [NO]CH, [NO]GR, VM 
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4.2.13 Checksum (CS) 



CS 



CS [<addressl>] [<address2>] 



The Checksum command provides access to the same checksum routine used by the 
power-up/reset (PWRT) self-test firmware. This routine is used in two ways 
within TENbug. 

a. At power up, if pins 5 and 6 of jumper J2 are connected, the self -test is 
executed. One of the many items verified is the checksum contained in 
TENbug ROM. If for any reason the contents of ROM were to change from 
the factory version, the checksum test is designed to detect the change 
and inform the user of the failure. 

b. Following a valid self-test, TENbug 2.x examines the VME address space 
for code that needs to be executed. This feature (ROMBOOT) makes use of 
the checksum routine to verify that a routine in memory is really there 
to be executed at power up. For more information refer to paragraph 
2.10, which describes the format of the routine to be executed and the 
interface provided upon entry. 

This command is provided as an aid in preparing routines for the ROMBOOT 
feature. Since ROMBOOT does checksum validation as part of its screening 
process, the user needs access to the same routine in the preparation of 
EPROlVROM routines. 

The [<address>] parameters can be provided in two forms: 

a. An absoute address (24-bit maximum) • 

b. An expression using a displacement + relative offset register. 

Any previous addresses are saved as default addresses for CS commands invoked 
later. This is convenient since users typically enter the address range to 
calculate the checksum and then enter the results into memory (into bytes that 
were $0000 while the checksum was calculated) . When the CS command is used to 
verify the content and location of the new checksum, the operands need not be 
entered since the command retains the addresses used to calculate the previous 
checksum. The even and odd byte result should be 0000, verifying that the 
checksum bytes were calculated correctly and placed in the proper locations. 

The default operands at power up are the starting/ending addresses of the TENbug 
2.x firmware. The results for even and odd bytes should be 0000. 

The algorithm used to calculate the checksum is as follows: 

a. $FF is placed in each of two bytes within a register. These bytes 
represent the even and odd bytes as the checksum is calculated. 

b. Starting with the first address, the even and odd bytes are extracted 
from montiory and XORed with the bytes in the register. 

c. This process is repeated, word by word, until the ending address is 
reached. Note that the last word addressed is NOT included in the 
checksum. This technique allows use of even ending addresses ($D40000 as 
opposed to $D3FFFE) . 
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EXAMPLE 



TENbug 2.x > CS 

PHYSICAL ADDRESS=OOFOOOOO 00F08000 
(EVEN ODD) =0000 



TENbug 2.x > MP 20000 3F 



020000 42 4F 4F 54 00 00 00 14 00 00 00 A6 54 65 73 74 

020010 41 F9 00 01 FO 00 20 3C 00 00 EF FF 11 00 51 C8 

020020 FF FC 4E 75 01 01 00 00 10 08 FF FF FF FF FF FF 

020030 FFFFFFFFFFFFFFFF FFFFFFFFFFFFFFFF 



TENbug 


2.x > M 20010;DI 






020010 


41F90001F000 


LEA.L 


$0001F000,A0 ?(CR) 


020016 


203C0000EFFF 


MOVE.L 


#61439, DO ?(CR) 


02001C 


1100 


MOVE.B 


DO,- (AO) ?(CR) 


02001E 


51C8FFFC 


DBF.L 


D0,$02001C ?(CR) 


020022 


4E75 


RTS 


?(CR) 


020024 


0101 


BTST 


D0,D1 ?(CR) 


020026 


0000 


DC.W 


$0000 ?(CR) 


020028 


1008 


DC.W 


$1008 ?(CR) 


02002A 


FFFF 


DC.W 


$FFFF ?(CR) 


02002C 


FFFF 


DC.W 


$FFFF ?(CR) 


02002E 


bVb'b' 


DC.W 


$FFFF ?(CR) 


020030 


FFFF 


DC.W 


$FFFF ?.(CR) 



CS 

COMMENT 

CS command entered without operands right after power 
up (addresses are TENbug firmware limits by default) . 



Display routine requiring a checksum. Start at 
$20000; last byte is at $20029. Checksum will 
be placed in bytes at $20026 and $20027, so they 
are zero v^ile calculating the checksum. 

BOOT. ..... .StTest 

Ay. .p. <..o...QH 



Display executable code plus revision number, 
checksum, socket ID, and a few unused bytes following 
the routine: 



0101 is revision. 

0000 is where checksum is to be placed. 
1008 are socket locations U16 and U08. 
FFFF is unused memory. 
FFFF is unused memory. 
FFFF is unused memory. 
FFFF is unused memory. 



8 



TEltoug 2.x > CS 20000 2002A 
PHYSICAL ADDRESS=00020000 0002002A 
(EVEN ODD)=4B34 



TENbug 2.x > M 20026 ;W 
020026 0000 ?4B34. 

TENbug 2.x > CS 

PHYSICAL ADDRESS=00020000 0002002A 
(EVEN ODD) =0000 

TENbug 2.x > .R3 2000 

TENbug 2.x > CS 0+R3 2A+R3 
PHYSICAL ADDRESS=00020000 0002002A 
(EVEN ODD)=4B34 



TENbug 2.x > H 26+R3;W 
000026+R3 0000 ?4B34. 

TENbug 2.x > CS 

PHYSICAL ADDRESS=00020000 0002002A 
(EVEN ODD) =0000 



TENbug 2.x > 



Request checksum of area using absolute addresses. 

Checksum of even bytes is $4B. 
Checksum of odd bytes is $34. 

Place these bytes in zeroed area used while 
calculating checksum. 

Verify checksum (no operands needed if same as 

previous entries) , 

Result is 0000/ good checksum. 

Define value of relative offset register 3. 

Request checksum of area using relative of set. 

Checksum of even bytes is $4B. 
Checksum of odd bytes is $34. 

Place these bytes in zeroed area used while 
checksum was calculated. 

Verify checksum (no operands needed if same as 
previous entries) . 



4.2.14 Data Conversion (DC) 



DC 



DC <expression> 



The DC command is used to convert an expression into hexadecimal and decimal. 
The expression may be entered in hexadecimal, decimal, or mixed format; output 
will be shown both ways. Default input format is hexadecimal. Octal and binary 
values may also be converted to decimal and hexadecimal values. 

The following symbols are used: 

$ precedes hexadecimal value (default; may be omitted) 

& precedes decimal value 

(§ precedes octal value 

% precedes binary value 



Except for .RO, offset registers may not be used with the DC command. 

This command is useful in calculating displacements such as destination of 
relative branch instructions or program counter relative addressing modes. 



COMMAND FORMAT DESCRIPTION 

TENbug 2.x > DC $<data> Convert hexadecimal data into hexadecimal 

and decimal. 

TENbug 2.x > DC &<data> Convert decimal data into hexadecimal and 

decimal . 



EXAMPLE 

TENbug 2.x > DC &120 
000078 =$78=&120 

TENbug 2.x > DC &15+$4~$13 
000000 =$0=&0 

TENbug 2.x > DC -1000 

FFFOOO =$FFFFF000=-$1000=-&4096 

TENbug 2.x > DC &15-$9+@14-%1100 
000006 =$6=&6 

TENbug 2.x > 
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4 •2, 15 Display Formatted Registers (DF) 



DF 



DF 



The DF command is used to display the MC68010 registers. The registers display 
is also provided whenever TENbug gains control of the program execution (i.e., 
at breakpoints and when tracing) . 

Note that any single register can be displayed with the .A0-.A7r .D0-.D7, and 
similar commands. Refer to the descriptions of the Display/Set Register comnnand 
(.<register>) and the OF command. 



EXAMPLE COMMENTS 

TENbug 2.x > Display formatted registers. Notice that the 

values of register A7 and the user stack pointer 
are the same because the status register 
indicates user mode. 

POOOOOOOOO SR=0000=..0 USP=FFFFFFFF SSP^OOOOOOOO VBR=00000000 SFC=2 DFC=7 

DO-7 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
AO-7 00000000 00000000 00000000 00000000 00000000 00000000 00000000 FFFFFFFF 
PC=000000 0000 DC.W $0000 

TENbug 2.x > .A7 1100 



TENbug 2.x > DF Once again the values of A7 and the user stack 

pointer are the same. The latter was changed by 
altering A7 in the user mode. 

POOOOOOOOO SR=0000=..0 USP=00001100 SSP=00000000 VBR=00000000 SFC=2 DFC=7 

DO-7 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
AO-7 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00001100 



POOOOOOO 


0000 


DC.W $0000 


TENbug 2.x > 


.SS BOO 


Set supervisor stack pointer. 


TENbug 2.x > 


.SR 2700 


Set supervisor state and interrupt level 7. 


TENbug 2.x > 


.R3 AOO 


Set relative offset register 3 to $A00. 


TENbug 2.x > 


.PC 0+R3 


Set program counter to start of area using 



relative offset register. 
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DF 



TENbug 2.x > Display formatted registers again. Notice that 

the supervisor mode in the status register 
results in the supervisor stack pointer being 
displayed both as the SSP and A7. Other changes 
include the program counter now being displayed 
in two ways: on the first line as an absolute 
address y and on the fourth line relative to the 
closest offset register equal to or below the 
absolute address. Notice also that the current 
location of the program counter is displayed in 
both hexadecimal and disassembled M68010 source 
statements. 

PC=OOOOOAOO SR=2700=.S7 USP=00001100 SSP=OOOOOBOO VBR=00000000 SFC=:2 DFC=7 

DO-7 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
AO-7 00000000 00000000 00000000 00000000 00000000 00000000 00000000 OOOOOBOO 
PC=000000+R3 41F81000 LEA.L $00001000,A0 

TENbug 2.x > 
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4.2.16 Dump Memory (S-Records) (DU) 



DU 



DU[<port nu[nber>] <addressl> <address2> [<text>] 



The DU command formats memory data in S-record form and sends it to a specified 
port. The default port number is port 1, the VME/10 built-in CRT 
terminalAeyboard. The first record output is an SO record, which will contain 
the characters entered in the text field on the command line, if any. The last 
record output is an S7/ S8, or S9 terminator. See Appendix D for information on 
S-records, 

To dump to a peripheral using the DU command, a dual serial I/Omodule, MVME400, 
or a dual parallel I/Onodule, MVME410, must be available on the I/O Channel, 
Note that serial ports 1 and 2 on the MVME400 correspond to TENbug ports 3 and 
2, respectively, and that parallel ports 1 and 2 on the MVME410 correspond to 
TENbug ports 4 and 5, respectively. 

Default destination is the console terminal. Specifying DU<port number> allows 
the output to be directed to another port. 



Valid port numbers for this command are: 



PORT NUMBER DESCRIPTION 

none Defaults to TENbug port 

1 Specifies TENbug port 1 

2 Specifies TENbug port 2 

3 Specifies TENbug port 3 

4 Specifies TENbug port 4 

5 Specifies TENbug port 5 



1 {VME/10 built-in terminalAeyboard) . 
(VME/10 built-in terminalAeyboard) . 
(MVME400 port 2 - 7201/B) . 
(MVME400 port 1 - 7201/A) . 
(MVME410 port 1 - PIA/A) . 
(MVME410 port 2 - PIVB) . 



This command does not send control characters to start or stop peripheral 
devices . 

See also: LO, PF, VE 

NOTE 

Offset RO is added to the address field in each S-record. 



EXAMPLE COMMENT 

TENbug 2.x > MP AGO 30 Display memory where routine to be transferred 

exists. 

OOOAOO 41 F8 10 00 20 3C 00 00 02 FF 11 00 51 C8 FF FC Ax.. < QH.: 

OOOAIO 60 EE 4E 71 4E 71 4E 71 4E 71 4E 71 4E 71 4E 71 ' nNqNcjNqNqNqNqNq 
000A20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
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DU 



TENbug 2,x > MP AOO 7;DI 



Display memory using the disassembler. 



OOOAOO 
000A04 
OOOAOA 
OOOAOC 
OOOAIO 
000A12 
000A14 



41F81000 

203C000002FF 

1100 

51C8FFPC 
60EE 
4E71 
4E71 



LEA.L 

MOVE.L 

MOVE.B 

DBF.L 

BRA.S 

NOP 

NOP 



$00001000, AO 
#767, DO 
DO,- (AO) 
DO,$OOOAOA 
$000A00 



TENbug 2.x > DU AOO A15 TENBUG 2.X Test 

Dump memory to default port, starting at $A00 
through A15, and place title within SO record. 

PHYSICAL ADDRESS=OOOOOAOO 00000A15 Note: This appears on the default 

S012000054454E42554720322E582054455354FO CRT display. 

S1130A0041F81000203C000002FF110051C8FFFC17 

S1090A1060EE4E714E7110 

S9030000FC 

TENbug 2.x > 
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4.2.17 Go Direct Execute Program (GD) 



GD 



GD [<address>] 



The GD command is similar to the GO command, except that GD does not set 
breakpoints, nor does it start by tracing one instruction. The GD cannand 
starts the target program at the location given as <address> without changing 
any of the exception vectors (default locations 0 through $3FF) • If <address> 
is not specified, the GD command starts the target program at the address in the 
program counter. 



See also: GO, GT 



EXAMPLE 



(Listir^ of program in memory at location 001900) 
001900 1018 MOVE.B (AO)+,DO 

001902 OCOOOOOO CMP.B #0,D0 

001906 66F8 BNE.S $001900 

001908 4E75 PTS 



TENbug 2.x > BR 1900 1908 



BREAKPOINTS 
001900 001900 
001908 001908 



TENbug 2.x > G 1900 
PHYSICAL ADDRESS=00001900 



AT BREAKPOINT 

PC=00001900 SR=2704=.S7..Z.. USP=0000C19E SSP=OOOOOCOO VBR=00000000 SFC=2 DFC=2 

DO-7 00000000 00000000 00003048 4D453455 00000000 00000020 00000000 0007FFFE 

AO-7 00001002 00001694 0000065C 00F01D72 00F0120C 00000538 00000538 OOOOOCOO 
PC=001900 



TEIJbug 2.x > GD 1900 
PHYSICAL ADDRESS=00001900 
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4.2.18 Go Execute Program (GO) GO 

G 



GO [<address>] 
G [<address>] 

The Go (G or GO) command causes the target registers (previously saved in RAM) 
to be placed into the actual MC68010 hardware registers, and any breakpoints 
previously requested to be placed into RAM. When this is completed, control is 
given to the target program by one of two methods. If no operands are provided 
with the G (or GO) command, the current value of the program counter is used. 
If an address is provided, this address will be placed into the program counter 
and then used to give control to the target code. The program starts by first 
tracing one instruction and then free running until one of the following events 
interrupts the program execution. 

a. The target program encounters a breakpoint. 

b. An abnormal program sequence causes exception processing (e.g., divide by 
zero) . 

c. The operator intervenes through use of the RESET or ABORT pushbuttons on 
the VME/10 operator panel. 

NOTE 

The execution will be in REAL TIME unless 
any breakpoints with <count> are encountered. 



The [<address>] parameter can be provided in several formats: 

a. An absolute address (24-bit maximum) • 

b. An expression using a displacement + relative offset register. 

c. Address indirect, using the contents of RAM (or ROM) to acquire the new 
program counter contents. 

d. Register indirect, using the contents of address registers 0 through 7 to 
acquire the new program counter contents. 
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GO 
G 



EXAMPLE 

TENbug 2.x > .PC AOO 

TEl4bug 2.x > G 
PHYSICAL ADDRESS=OOOOOAOO 
AT BREAKPOINT 
PC=OOOAOA 1100 MOVE.B DO,- (AO) 

TE^^bug 2.x > G AOO 
PHYSICAL ADDRESS=OOOOOAOO 
AT BREAKPOINT 
PC=OOOAOA 1100 MOVE.B DO,- (AO) 

TENbug 2.x > M 20000;L 
020000 00000000 ?A00. 

TENbug 2.x > GO [20000] 
PHYSICAL ADDRESS=OOOOOAOO 
AT BREAKPOINT 
PC=OOOAOA 1100 MOVE.B DO,- (AO) 

TENbug 2.x > .Al AOO 

TENbug 2.x > G (Al) 
PHYSICAL ADDRESS=OOOOOAOO 
AT BREAKPOINT 
PC=OOOAOA 1100 MOVE.B DO,- (AO) 

TENbug 2.x > .R2 AOO 

TENbug 2.x > GO 0+R2 
PHYSICAL ADDRESS=OOOOOAOO 
AT BREAKPOINT 
PC=00000A+R2 1100 MOVE.B DO,- (AO) 

TENbug 2.x > 



COMMENT 

Set program counter to desired address. 
Enter Go comnand using existing PC. 

Enter Go command with absolute address provided. 

Set RAM location to contain an execution address. 
Enter Go conmand providing indirect address in RAM. 

Set address register to contain an execution address. 
Enter Go command providing indirect addressing in Al. 

Set relative offset register to contain start of module. 
Enter Go command providing a displacement and offset register. 



Notice the physical address used in each example, though provided 
in a different way in each case, is identical. 



4.2.19 Graphics RAM Display (GR and NOGR) 



GR 
NOGR 



GR [<bits>] 
NOGR 

The Graphics Display (GR) command provides access to specific bits within VME/10 
control register 1 ($F19F07) . These bits determine whether the graphics RAM is 
displayed upon the CRT built into the VME/10. These bits are called the 
graphics enable bits and must be on to allow the respective colors, or shades of 
green r that they control to be displayed upon the screen. 

For more detailed information about the control registers, see the VME/10 
Microcomputer System Reference Manual. 

An optional <bits> parameter, 0-7, can be provided to replace the current 
configuration of bits 3, 2, and 1 of VME/10 control register 1, Default is 7 
(all bits on) , allowing the character display to appear on the CRT. 

If NOGR is entered, the current values of bits 3, 2, and 1 within control 
register 0 are first saved, and then replaced by zero (all bits off) . This 
removes any graphics data appearing on the screen. The data still resides in 
display RAM; only the control register has been modified. 

To once again display graphics data the GR command can be entered. The value 
saved when NOGR was last executed will be restored. If the optional <bits> 
parameter is provided, the new value is used in place of the bit pattern 
previously saved. 

See also: [NO]BARS, [NO]CH, CRT, VM 

EXAMPLE COMMENT 

TENbug 2.x > GR Display the contents of graphics RAM. 

TENbug 2.x > BARS Execute the graphics test pattern command. Nbtice 

both graphics and character data are displayed. 

TENbug 2.x > NOCH Remove all character data from the screen. 

Remember the following CANNOT 
be seen but is shown as a guide: 

TENbug 2.x > GR 4 Enable only the color, or shade of green, 

controlled by bit 2 of control register 1. 

TENbug 2.x > NOGR When the carriage return is pressed, all graphics 

and character data are gone. 

TENbug 2.x > GR The last value previously used in the graphics 

control register bits is restored (4 in this 
example) . 

TENbug 2.x > Oi Restore the character display. 

Now the entire character screen 
is shown as well as graphics RAM. 

TENbug 2.x > NOGR Remove the graphics display. 

TENbug 2.x > 
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4.2.20 Go Until Breakpoint (GT) GT 



GT <terrporary breakpoint address> 



The GT command performs the following: 

a. Sets the tenporary breakpoint specified on the comnand line. 

b. Sets breakpoints entered by the BR command. 

c. Sets target program registers as displayed by the DF command. 

d. Causes the target program to execute from the PC address (free run in 
real time) . 

When any breakpoint is encountered, the temporary breakpoint is reset. 



See also: BR, DF, GD, GO, TR, TT 



EXAMPLE 

(Listing of program in memory at location 001900) 
001900 1018 MOVE.B (AO) + ,DO 

001902 OCOOOOOO CMP.B #0,D0 

001906 66F8 BNE.S $001900 

001908 4E75 RTS 

TENbug 2.x > BR 1900 1908 

BREAKPOINTS 
001900 001900 
001908 001908 

TENbug 2.x > .PC 1900 

TENbug 2.x > GT 1906 
PHYSICAL ADDRESS=00001906 
PHYSICAL ADDRESS=00001900 

AT BREAKPOINT 

PC=00001906 SR=2700=.S7 USP=0000C19E SSP=00000BF8 VBR=00000000 SFC=2 DFC=2 

DO-7 00000020 00000000 00003048 4D453455 00000000 00000020 00000000 0007FFFE 

AO-7 0000160E 00001694 0000065C 00F01D72 00F0120C 00000538 00000538 00000BF8 
PC=001906 

TENbug 2.x > BR 

BREAKPOINTS 
001900 001900 
001908 001908 

TENbug 2.x > 
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4.2.21 Help (HE) 
HE 

The HE commard displays a list of available commands. 
EXAMPLE 

TENbug 2.x > HE 

.PC .SR. .US .SS .VBR .DFC .SFC 
.DO thru .D7 
.AO thru .A7 
.RO thru .R7 



CRT 


CH 


NOCH 


GR 


NOGR 


(Control Registers) 


BARS 


NOBARS 






(Test Graphics RAM) 


IOC 


lOP 


lOT 






(Physical Disk I/O) 


cs 


BF 


BH 


BI 


BM 


BO BR NOBR 


BS 


BT 


DC 


DF 


DU 


G GD GO 


GT 


HE 


LO 


M 


MD 


MM MS OF 


PA 


NOPA 


PF 


T 


TM 


TR TT VE 



VM 

TENbug 2.x > 
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4.2.22 I/O Command for Disk (IOC) 



IOC 



IOC 



The IOC coramand allows the user to issue comnands directly to the RWINl 
controller. 

When invoked, this command prompts for the drive and controller required. An 
address where the current HWINl canmand is located and hex display of that 
command are shown, followed by an "ARE YOU SURE?" prompt. 

The coramand is used primarily as a debugging tool to issue commands to the RWINl 
controller to locate problems with either drives, media, or the controller 
itself. The RWINl commands are as follows: 



NOTE: For more information see the Winchester Disk Controller User's Manual, 

The default values are the parameters left over from any previous controller 
request. An lOP command or, if an operating system has been booted and the 
debugger was reentered with the use of the ABORT button, the drive, controller 
and the last command (08 read sectors) issued by boot to the RWINl controller 
are the current default values. 

While answering the prompts, there are four actions that can be taken following 
the question mark prompt: 

? (CR) - Entering a carriage return indicates that the existing value for 



the current parameter is acceptable; go on to the next 
parameter . 

Entering a period indicates that this execution of the IOC 
coramand must be terminated now, without asking for more 
parameters. 

Entering a caret symbol indicates that a previous parameter 
requires a change and will logically back up one parameter each 
time it is entered (until the first entry is reached, where it 
will remain until one of the other responses is received) , 



? <data> - Entering the appropriate data requested (followed by a carriage 
return or ENTER) . Often the parameters are checked for valid 
options (i.e., Y or N) . 



0/0 
0/1 
0/4 
0/6 
0/7 
0/8 
0/9 
0/A 
0/B 
0/C 
0/D 
0/E 
6/0 



Check drive status 
Recalibrate 
Format drive 

Format track (refer to example) 
Format default/alternate track 
Read sectors (use lOP comntiand) 
Scan sectors 

Write sectors (use lOP command) 

Seek 

Read track (Winchester only) 
Read EOC (Winchester only) 
Write BCC (Winchester only) 
Configure drive 
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IOC 



EXAMPLE 

TENbug 2.x > lOP 

READ OR WRITE (R/W)= R ? W 

MEMORY ADDRESS FOR DISK I/0=. $00001000 ? 2000 

DRIVE NUMBER (0&1=FIXED,2&3=FLOPPY) = $00 ?2 

CONTROLLER NUMBER=. . . . . . .$00 ? (CR) 

FIRST BLOCK NUMBER=. $00000000 ? 100 

NUMBER OF (256 BYTE) BLOCKS^ $0001 ? (^) 

ARE YOUR SURE (Y/N) ? Y 

DISK ERROR: STATUS=:06 4D 00 08 09 01 40 01 00 09 



COMMENT 

Invoke the physical disk I/O command. 

Specify a write operation. 

Write to memory location $2000. 

Write to drive 2 (floppy) • 

Write to RWINl controller. 

Write to block number $100. 

Write one 256-byte block. 



Last chance 



Sure? Yes 



For this example an unformatted floppy disk was 
placed into drive 2. As^ expected an "06" indicates 
that the ID HEADER NOT POUND message from the 
Winchester Disk Controller User's Manual is the 
correct description of the situation. 



PC=00F04EBC SR=2700=.S7 USP=:FFFFFFFF SSP=000008CC YBR=00000000 SFC=2 DPC=7 

DO-7 00000001 OOOOOOAC 00002100 00000109 00000000 00000010 00000028 00042700 
AO-7 OOFICODI 00002100 00000682 00F1C0D9 00001010 0000054E 0000054E 000008CC 
PO==F04EBC 4BFAFDC0 LEA.L $00F04C7E(PC) rA5 



TENbug 2.x > IOC 

DRIVE NUMBER (0&1=FIXED^2&3+FLOPPY) = $02 ? (CR) 

CONTROLLER NUMBEI^=.. $00 ? (CR) 

DISK COMMAND AT $00000634 = $0A 40 01 08 01 AC 

ARE YOU SURE (Y/N) ? N 



The IOC command will be used to write the ID header 
for a specific track. To start / the RWINl command 
must be located. This is done by entering an IOC 
comnand. The RWINl comnand last used is then 
displayed along with its address. In this case, 
the last request was "OA" for the write that was 
attempted in the lOP. 
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TENbug 2.x > M 634 
000634 OA ? 06 

TENbug 2.x > IOC 

DRIVE NUMBER (0&1=FIXED,2&3-FLOPPY) = $02 ? (CR) 

CONTROLLER NUMBER= $00 ? (^) 

DISK COMMAND AT $00000634 = $0A 40 01 08 01 AC 
ARE YOU SURE (Y/N) ? Y 

TENbug 2.x > lOP 

READ OR WRITE (R/W)= W ? (CR) 

MEMORY ADDRESS FOR DISK I/0=. $00002000 ? (^) 

DRIVE NUMBER (0&1=FIXED,2&3=FLOPPY) = $02 ? (^) 

CONTROLLER NUMBER= $00 ? (^) 

FIRST BLOCK NUMBER=. $00001000 ? (CR) 

NUMBER OF (256 BYTE) BLOCKS= $0001 ? (OR) 

ARE YOU SURE (Y/N) ? Y 

"W" COMPLETE 



TENbug 2.x > 



IOC 



Modify memory at the specified address ($634 in this 
example) and change the write ($0A) operation to a 
format track ($06) operation (Chapter 4 in the 
Winchester Controller User's Manual). 



Invoke the IOC comniand and, after verifying the 
correct drive and controller and that the RWINl 
conmand is proper, reply Y in response to the 
ARE YOU SURE? prompt. 



With the return of the TENbug prompt the conmand is 
complete. Note that a total format will require 
longer than the "dead man" timer provides; the TENbug 
program will time out and send an error message, but 
the ra^Nl controller will proceed with the carmand 
until complete. 



In this example the write can now be completed, as 
long as the one track that was formatted is all that 
is specified. 
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4.2.23 I/O Physical for Disk (lOP) lOP 
lOP 



The lOP command allows the user to do physical reads or writes to the disk. 
When invoked, this command prompts for the information required to perform the 
Input/Output operation. The initial values for drive and controller are zeros, 
(hard disk 0 on the WHUl controller) • However, once a parameter has been 
changed the new value will become the new default. 

Notice that this ccramand can only perform reads and writes through the EWINl 
controller. If for some reason any of the other EWINl commands are required, 
the IOC conmand can be used. 

While answering the prcmpts, there are four actions that can be taken followir^ 
the question mark pranpt: 

? ( CR) - Entering a carriage return indicates that the existing value for 
the current parameter is acceptable; go on to the next 
parameter , 

? - Entering a period indicates that this execution of the IOC 

coranana must be terminated now, without asking for more 
parameters, 

? 2_ ~ Entering a caret symbol indicates that a previous parameter 

requires a change and will logically back up one parameter each 
time it is generated (until the first entry is reached, where it 
will remain until one of the other responses is received) . 

? <data> - Entering the appropriate data requested (followed by a carriage 
return or ENTER) . Often the parameters are checked for valid 
options (i,e, Y or N) , 



NOTE 

Care should be taken when using this diagnostic tool. 
Portions of the operating system could be destroyed if 
an incorrect area of a disk were modified. 
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EXAMPLE 



TEtJbug 2.x > lOP 

REM) OR WRITE (VW) = R ? (^) 

MEMORY ADDRESS FOR DISK I/0=. $00000000 ? 1000 

DRIVE NUMBER (0&l=FIXED,2&3=FLOPPy) = $00 ? ^ 

MEMORY ADDRESS FOR DISK 1/0= ,$00001000 ? AOO 

DRIVE NUMBER (0&1=FIXED,2&3=FLOPPY) = $00 ? 2 

CONTROLLER NUMBER= $00 ? (CR) 

FIRST BLOCK NUMBER=. $00000000 ? 500 
NUMBER OF (256 BYTE) BLOCKS= $0000 ? 1 



ARE YOU SURE? (Y/N) ? Y 
"R" COMPLETE 



TENbug 2.x > MD AOO 30 

OOAOO 41 F8 10 00 20 3C 00 00 02 FF 11 00 51 C8 FF PC 

OOOAIO 60 EE 4E 71 4E 71 4E 71 4E 71 4E 71 4E 71 4E 71 

000A20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 



TENbug 2.x > M A12;L 
000A12 4E714E71 ? 
000A16 4E714E71 ? ^ 
OOOAIA 4E714E71 ? ^ 
OOOAIE 4E710000 ? -1 
000A22 00000000 ? . 



TENbug 2.x > lOP 

READ OR WRITE (10^ = R ? W 

MEMORY ADDRESS FOR DISK I/0=.$OOOOOAOO ? (OR) 

DRIVE NUMBER (0&1=FIXED,2&3=FLOPPY) =: $02 ? (CR) 

CONTROLLER NUMBER= $00 ? (CR) 

FIRST BLOCK NUMBER=. $00000500 ? (CR) 

NUMBER OF (256 BYTE) BLOCKS= $0001 ? (CR) 



ARE YOU SURE (Y/N) ? Y 
"W" COMPLETE 



TENbug 2.x > 



COMMENT 



Request physical disk I/O to read a routine. 

Use default of read. 

Change $0 default to $1000. 

That isn't correct; back up one parameter. 

Change $1000 to $A00. 

Change default drive 0 to drive 2. 

Use controller 0. 

Change block number to $500. 

Read one 256-byte block. 

Last change? Yes, all is ready. 

The read is complete. 



Display data read 

Ax a. QH . • 

• nNqNqNqNqNqNqNq 



frc»n disk (only 



first $30 bytes) . 



Make change to RAM where routine was loaded. 



Request physical disk I/O to write to a disk. 

Change to W for write. 

Use previous address. 

Drive is fine; no change. 

No change. 

No change. 

No change. 

Last chance; are you sure? Yes, all is ready. 
Write is complete. 



4.2.24 I/O Teach for a Disk (lOT) 



lOT 



lOT 



The lOT command allows the user to change the configuration of the RWINl 
controller. When invoked, this command prompts for the information required to 
perform the configuration command. 

Depending on the type of drive there are varying parameters required. 



The lOT command will present the appropriate questions based upon which drive 
has been specified. There are four actions that can be taken following a 
question mark prompt: 

^ ( ^^ ) " Entering a carriage return indicates that the existing value for 
the current parameter is acceptable; go on to the next 
parameter . 



- Entering a period indicates that this execution of the IOC 
command must be terminated now, without asking for more 
parameters. 

- Entering a caret symbol indicates that a previous parameter 
requires a change and will logically back up one parameter each 
time it is entered (until the first entry is reached, where it 
will remain until one of the other responses is received) . 



? <data> - Entering the appropriate data requested (followed by a carriage 
return or ENTER) . Often the parameters are checked for valid 
options (i.e, Y or N) . 



Appropriate configuration information for specific disk types is listed in the 
"Mass Storage" chapter of the VERSAdos to VME Hardware and Software 
Configuration User's Manual. 



WINCHESTER HARD DISK 



5.25-INCH FLOPPY DISK 



Drive number 

Controller number 

Sector size 

Number of heads 

Number of cylinders 

Number of sectors per track 



Drive number 

Controller number 

Sector size 

Number of heads 

Niamber of cylinders 

Number of sectors per track 

Motorola/IBM format 

Single- or double-sided media 

Single- or double-track density 

Single- or double-data density 
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EXAMPLE 



TENbug 2.x > lOT 

DRIVE NUMBER (0&1=FIXED,2&3=PLOPPY) = $02 ? 00 

CONTROLLER NUMBER= $00 ? (^) 

SECTOR SIZE (0=128,1=256,2-512,3-1024)= ....1 ? ^ 

TENbug 2.x > lOT 

DRIVE NUMBER (0&1=FIXED,2&3=FLOPPY) = $00 ? 02 

CONTROLLER NUMBER= $00 ? (CR) 

SECTOR SIZE (0=128,1=256,2-512,3-1024) = 1 ? (CR) 

NUMBER OF HEADS, (ON THIS DRIVE) = $02 ? (CR) 

NUMBER OF CYLINDERS, (ON THIS DRIVE) = $0050 ? (CR) 

SECTORS PER TRACK= $10 ? S 

MOTOROLVIBM FORMAT {M/l)= I ? (^) 

SINGLEA)OUBLE SIDED MEDIA (S/D)= D ? (^) 

SINGLE/DOUBLE TRACK DENSITY (S/D)= D ? (^) 

L SINGLE/DOUBLE DATA DENSITY (SA>)= D ? S 



COMMENT 



Teach RWINl controller a new configuration. 

Select drive 0. 

Use default controller 0. 

Change of heart ••• start over again. 



Invoke the lOT catmand again. 
Configure drive 2 (first floppy) • 
Nb change. 
No change. 
No change. 
No change. 

Change from 16 sectors/track to 8. 
Nb change. 
No change. 
Nb change. 

Change to single-data density. 



TENbug 2.x > lOT 

DRIVE NUMBER (0&1=FIXED,2&3=FLOPPY) = $02 ? 0 

CONTROLLER NUMBER= $00 ? (OR) 

SECTOR SIZE(0=128, 1=256, 2=512, 3=1024)= 1 ? (CR) 

NUMBER OF HEADS, (ON THIS DRIVE) = $01 ? (OR) 

NUMBER OF CYLINDERS, (ON THIS DRIVE) = $0001 ? ^ 

NUMBER OF HEADS, (ON THIS DRIVE) = $01 ? 2 

NUMBER OF CYLINDERS, (ON THIS DRIVE) = $0001 ? 132 

SECTORS PER TRACK= $00 ? 20 



TENbug 2.x > 



lOT 



Invoke lOT to change configuration of hard disk to 
allow use as a 5-megabyte hard disk. 



Oops, passed the number of heads parameter; back up. 
Change to 2 heads. 
Change to $132 cylinders. 
And $20 (32) sectors/track. 



NOTE: These parameters are specifically for the 
5-megabyte Winchester hard disk. To find out 
what a particular Winchester hard disk 
requires for configuration, boot the operating 
systan and, while "inactive" (not updating 
critical files) , press the ABORT button. Then 
enter an lOT command to see how the boot 
device is configured. If all is well, enter 
GO and continue with operating system control. 



4.2.25 Load (S-Records) (LO) 



LO 



LO[<port nutnber>] [;<options>] =<text> 



The LO command prepares the VME/10 to receive S-records from the designated 
<port number> and then transmits the <text> following the = sign to the system 
connected to the <port number> indicated. As the S-records are received, the 
checksums are verified and the data placed into memory. If the automatic 
relative offset register, RO, contains a nonzero value, this offset is added to 
the address contained within the S-record before the data is moved into memory. 

The following options are supported: 

;-C Ignore validation of the checksum on each S-record while loading. 

;X Echo the S-records read to the VME/10 built-in terminal. Different 

environments may dictate that the ;X option not be used. If 
printer attach is in effect, the data cannot be displayed upon the 
screen (and then printed on the printer) before the next record 
arrives. Thus data can be missed. 

This comnnand requires that a dual serial I/Qmodule (MVME400) be available on the 
I/O Channel. Nbte that serial ports 2 and 1 on the MVME400 correspond to TENbug 
ports 2 and 3, respectively. 

Default source is the TENbug port 2. Specifying LO<port number> allows the 
input to be received from other ports. 

Valid port numbers for this connmand are: 



PORT NUMBER DESCRIPTION 

none Defaults to TENbug port 2 (MVME400 port 2 - 7201/B) . 

1 Specifies TENbug port 1 (VME/10 built-in terminalAeyboard) . 

2 Specifies TENbug port 2 (MVME400 port 2 - 7201/B) . 

3 Specifies TENbug port 3 (MVME400 port 1 - 7201/A) . 
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LO 

EXAMPLE COMMENT 

TENbug 2.x > BF AOO FOO 2020 Fill RAM with spaces. 

PHYSICAL ADDRESS=OOOOOAOO OOOOOFOO 

TENbug 2.x > MP BOO Display RAM, 

OOOBOO 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 

TENbug 2.x > .RO 100 Set automatic relative offset register to 

$10 to reposition S-records to be loaded by 
+ $100. 

TENbug 2.X > LO =:DU AOO A80 Load S-records from $A00 to $A80 (into $B00 

DU AOO A80 to $B80) . 

TENbug 2.x > .RO O-t-R? Reset automatic relative offset register to 

zero. 

TENbug 2.x > .RO 
.RO=00000000 

TENbug 2.x > MP AOO Display memory at $A00 to verify S-records 

not loaded here. 

OOOAOO 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 



TENbug 2.x > MP BOO 7F 



OOOBOO 
OOOBIO 
000B20 
000B30 
000B40 
000B50 
000B60 
000B70 



00 01 
10 11 
20 21 
30 31 
40 41 
50 51 
60 61 
70 71 



02 03 
12 13 
22 23 
32 33 
42 43 
52 53 
62 63 
72 73 



04 05 
14 15 
24 25 
34 35 
44 45 
54 55 
64 65 
74 75 



FF FF 
16 17 
26 27 
36 37 
46 47 
56 57 
66 67 
76 77 



Display memory at offset $100 from source 
location. 



08 09 
18 19 
28 29 
38 39 
48 49 
58 59 
68 69 
78 79 



OA OB 
lA IB 
2A 2B 
3A 3B 
4A 4B 
5A 5B 
6A 6B 
7A 7B 



OC OD 
IC ID 
2C 2D 
3C 3D 
4C 4D 
5C 5D 
6C 6D 
7C 7D 



OE OF 
IE IF 
2E 2F 
3E 3F 
4E 4F 
5E 5F 
6E 6F 
7E 7F 



!"#S%&'()*+f-./ 
0123456789: ;<=>? 
QABCDEFGHIJKEMNO 
PQRSTUVWXYZ [\] 
' abodef gh i j kljmno 
pqrstuvwxyz{ | } " . 



TENbug 2.x > BF AOO BOO 4161 
PHYSICAL ADDRESS=OOOOOAOO OOOOOBOO 



Fill RAM with pattern. 



TENbug 2.x > MP AOO Display destination monory. 

OOOAOO 41 61 41 61 41 61 41 61 41 61 41 61 41 61 41 61 AaAaAaAaAaAaAaAa 
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DO 



TENbug 2.x > LP ;X=DU AOO A80 Enter Load command specifying ;X option 

(echo S-records to CRT as memory is being 
loaded) . 

DU AOO A80 

PHYSICAL ADDRESS=00000A00 00000A80 Notice SO, SI, and S9 records are displayed 

upon screen. (Refer to warning in command 
description about timing restrictions with 
the ;X option.) 

S0030000FC 

S1130A00000102030405FFFF08090AOBOCODOEOF79 

S1130A10101112131415161718191A1B1C1D1E1F5A 

S1130A20202122232425262728292A2B2C2D2E2F4A 

S1130A30303132333435363738393A3B3C3D3E3F3A 

S1130A40404142434445464748494A4B4C4D4E4F2A 

S1130A50505152535455565758595A5B5C5D5E5F1A 

S1130A60606162636465666768696A6B6C6D6E6F0A 

S1130A70707172737475767778797A7B7C7D7E7FFA 

S1040A8080F1 

S90300000FC 



TEtJbug 2.x > ^D AOO 80 Display memory containing downloaded data. 



OOOAOO 


00 


01 


02 


03 


04 


05 


FF 


FF 


08 


09 


OA 


OB 


OC 


OD 


OE 


OF 




OOOAIO 


10 


11 


12 


13 


14 


15 


16 


17 


18 


19 


lA 


IB 


IC 


ID 


IE 


IF 




000A20 


20 


21 


22 


23 


24 


25 


26 


27 


28 


29 


2A 


2B 


2C 


2D 


2E 


2F 


r'#s%&'()*+r-./ 


000A30 


30 


31 


32 


33 


34 


35 


36 


37 


38 


39 


3A 


3B 


3C 


3D 


3E 


3F 


0123456789: ;<=>? 


000A40 


40 


41 


42 


43 


44 


45 


46 


47 


48 


49 


4A 


4B 


4C 


4D 


4E 


4F 


@ABCDEFGHIJKLMNO 


000A50 


50 


51 


52 


53 


54 


55 


56 


57 


58 


59 


5A 


5B 


5C 


5D 


5E 


5F 


PQRSTUVWXYZ [\] 


000A60 


60 


61 


62 


63 


64 


65 


66 


67 


68 


69 


6A 


6B 


6C 


6D 


6E 


6F 


' abcdef ghi j klmno 


000A70 


70 


71 


72 


73 


74 


75 


76 


77 


78 


79 


7A 


7B 


7C 


7D 


7E 


7F 


pqrstuvwxyz{ 1 } " . 



NOTE 

The host system used to create and transmit the S-records 
was an MC68000 Educational Computer Board (MEX68KBCB) . 
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4.2.26 Manory Display (MD) 

MD[<port nuniber>] <address> [<count>] [;<options>] 



The MD command displays a portion of memory which begins at <address> and 
extends for the number of bytes or lines given as <count>. There are two 
formats that can be requested with the MD command. 

a. The dump format begins each line with the starting or next hexadecimal 
memory address followed by 16 hex bytes per line with the ASCII 
equivalent shown to the right. The number of lines varies with the 
<count> entered (or default) • There are no partial lines. If the byte 
count ends in the middle of a line, the complete line is displayed. 
(Default byte <count> is $10.) 

b. The disassesnbler format provides: 

1. The starting or next hexadecimal memory address. 

2. The object code displayed in hexadecimal. 

3. The M68010 source statement that will assemble into the object code 
as described in 2. above. 

If the operation code is not valid, a "Define Constant" is constructed 
for one word. Notice that <count> for the disassembler mode is a number 
of source lines to be disassembled and displayed, not the number of 
bytes. (Default line <count> is $10.) 

Default destination is the console terminal. Specifying MD<port number> allows 
the output to be directed to another port. 

Valid port numbers for this ccwmand are: 

PORT NUMBER DESCRIPTION 



none Defaults to TENbug port 1 (VME/10 built-in terminal Aeyboard) . 

1 Specifies TENbug port 1 (VME/10 built-in terminalAeyboard) . 

2 Specifies TENbug port 3 (MVME400 port 1 - 720 1/A) . 

3 Reifies TENbug port 2 (MVME400 port 2 - 7201/B) . 

4 Specifies TENbug port 4 (MVME410 port 1 - PIA/A) . 

5 l^cif ies TENbug port 5 (MVME410 port 1 - PIA/B) . 

Options supported are the disassembler and the screen option. 

;DI Requests the disassembler option. The <count>, if provided, is a 

line count (default is $10) • 

;S Requests the display of a full screen of memory (16 lines of 



display in either dump or disassombler format) . Notice that the 

default for disassembly is $10 (or 16 decimal) anyway. If the 

<count> and ;S option are both entered within the same MD comnnand, 
the ;S option has priority. 

All combinations are valid (e.g., ;DIS, ;SDI, ;S DI, ;DI S) • 
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MD 



The MD coinnnand has a quick scroll facility that lets the terminal operator press 
CR repeatedly following the initial MD command. In the past, all but the first 
display were automatically 16 lines long. To enable control blocks to be 
examined conveniently, the <count> (either bytes or lines) is used for each 
iteration. 



EXAMPLE 



TENbug 2.x > MD 10000 30 



COMMENT 

Display memory of a small routine in dump 
format. 



010000 41 F8 10 00 20 3C 00 00 02 FF 11 00 51 C8 FF FC Ax.. < QH. : 

010010 60 EE FF FF FF FF FF FF FF FF FF FF FF FF FF FF 'n 

010020 FFFFFFFFFFFFFFFF FFFFFFFFFFFFFFFF 



TEltoug 2.x > MD 10000 7;DI 



Display memory of the same routine in 
disassembler format. 



010000 


41F81000 


LEA.L 


$00001000, AO 


010004 


203C000002FF 


MOVE.L 


#767, DO 


OlOOOA 


1100 


MOVE.B 


DO,- (AO) 
D0,$01000A 


OlOOOC 


51C8FFPC 


DBF.L 


010010 


60EE 


BRA.S 


$010000 


010012 


FFFF 


DC.W 


$FFFF 


010014 


b'b'b'b' 


DC.W 


$FFFF 



TENbug 2.x > MD AOO 



Display memory without a <count>. 



OOOAOO 00 01 02 03 04 05 06 07 08 09 OA OB OC OD OE OF 
TENbug 2.x > (CR) 



Enter a carriage return; the next <count> 
bytes are displayed (default is $10) . 



OOOAIO 10 11 12 13 14 15 16 17 00 01 02 03 04 05 06 07 
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MD 



TENbug 2.x > MD AOQ;S Display a full screen of hexadecimal data. 



OOOAOO 


00 


01 


02 


03 


04 


05 


06 


07 


08 


09 


OA 


OB 


OC 


OD 


OE 


OF 


OOOAIO 


10 


11 


12 


13 


14 


15 


16 


17 


00 


01 


02 


03 


04 


05 


06 


07 


000A20 


08 


09 


OA 


OB 


OC 


OD 


OE 


OF 


10 


11 


12 


13 


14 


15 


16 


17 


000A30 


00 


01 


02 


03 


04 


05 


06 


07 


08 


09 


OA 


OB 


OC 


OD 


OE 


OF 


000A40 


10 


11 


12 


13 


14 


15 


16 


17 


00 


01 


02 


03 


04 


05 


06 


07 


000A50 


08 


09 


OA 


OB 


OC 


OD 


OE 


OF 


10 


11 


12 


13 


14 


15 


16 


17 


000A60 


00 


01 


02 


03 


04 


05 


06 


07 


08 


09 


OA 


OB 


OC 


OD 


OE 


OF 


000A70 


10 


11 


12 


13 


14 


15 


16 


17 


00 


01 


02 


03 


04 


05 


06 


07 


000A80 


08 


09 


OA 


OB 


OC 


OD 


OE 


OF 


10 


11 


12 


13 


14 


15 


16 


17 


000A90 


00 


01 


02 


03 


04 


05 


06 


07 


08 


09 


OA 


OB 


OC 


OD 


OE 


OF 


OOOAAO 


10 


11 


12 


13 


14 


15 


16 


17 


00 


01 


02 


03 


04 


05 


06 


07 


OOOABQ 


08 


09 


OA 


OB 


OC 


OD 


OE 


OF 


10 


11 


12 


13 


14 


15 


16 


17 


OOOACO 


18 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


OOOADO 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


OOOAEO 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


OOOAFO 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


TENbug 


2.x ; 


> MD AOO 18 




Display 


memory with 


a <count> 


OOOAOO 


00 


01 


02 


03 


04 


05 


06 


07 


08 


09 


OA 


OB 


OC 


OD 


OE 


OF 


OOOAIO 


10 


11 


12 


13 


14 


15 


16 


17 


00 


01 


02 


03 


04 


05 


06 


07 


TENbug 


2.x 


> (CR) 








Enter a 


carriage return to di 



bytes (starting where the last request ended, even 
if in the middle of the line) . 



000A18 00 01 02 03 04 05 06 07 08 09 OA OB OC OD OE OF 

000A28 10 11 12 13 14 15 16 17 00 01 02 03 04 05 06 07 

TENbug 2.x > (^) 

000A30 00 01 02 03 04 05 06 07 08 09 OA OB OC OD OE OF 

000A40 10 11 12 13 14 15 16 17 00 01 02 03 04 05 06 07 

TENbug 2.x > 
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4,2.27 Memory Modify (MM) 



MM 
M 



M [M] <addr ess> [ ; <opt ions> ] 



The function of the Memory Modify (M or MM) command is to change data in memory. 
An address and options are specified on the initial comnnand line. 

For convenient viewing and changing of object data, four variations of data 
updating capability are offered. These are enhanced by five options: the data 
size options, word and longword (the default size is byte); odd or even address 
access options (byte-size only) ; and a nonverif ication option for write-only 
operations. Action provided by an option specified on the initial command line 
is utilized in all four data updating subnodes and remains in force until the M 
comnnand is exited. 

The five memory change mode options are: 



;W 


Set size to word (i.e., two bytes) . 




;L 


Set size to longword (i.e., four bytes). 




;o 


Set size to byte; access only odd addresses. 




;v 


Set size to byte; access only even addresses. 




;N 


No verification. Do not read data after updating. If 
preceded by one of the above options (the semicolon 
between multiple options) . 


used, ;N must be 
(;) is required 



When the memory change mode is entered on execution of the initial command line, 
object data in the specified locations is displayed in hexadecimal format, and 
the M comnnand prompt (?) is presented at the right of the data. The data can 
then be changed using any of the subcommands described below. If desired, the 
action of the subcommand can be obtained without entering new data. For 
example, the contents of the preceding location (s) can be viewed by typing 
"''(CR)" alone after the ? proirpt, or the M command can be exited by typing 
".(CR)". 



[<data>] (CR) l^ate location and sequence forward. 

[<data>] '^(CR) Update location and sequence backward. 

[<data>] = (CR) \Jgdate location and reopen same location, 

[<data>] . (CR) Update location and terminate. 



Disassemble/Assemble Mode (the ;DI option) 

On execution of an initial M command line with the ;DI option selected, the 
disassemble/assemble mode is entered. Starting from the specified location, 
data is disassembled into a source instruction line, and both object data (in 
hexadecimal) and the source line are displayed. The M command prompt (?) is 
displayed to the right of the disassembled source line. If desired, a new 
source instruction may be typed and assenibled to replace the existing 
instruction (the first character must be a space, which is recognized as the 
label field delimiter by the TENbug one-line assembler) . Assembly is initiated 
by typing a carriage return. After assembly and updating, data in the following 
locations is disassertibled and the next source line displayed. Note that the 
update and sequence backward ('*(CR)) and the update and reopen the same location 
(=(CR)) features are not available in the disassemble/assorible mode. Typing 
".(CR)" while in this mode provides exit from the M command. 
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MM 
M 



EXAMPLE 

TENbug 2.x > M 10000 ;L 

010000 00000200 ? (CR) 
010004 FFFFFFFF ? -5. 



TENbug 


2.x 


> MM 10008;W;N 


010008 




nil 


OlOOOA 


■p 


2222 


OlOOOC 


? 


3333 


OlOOOE 


7 


4444 


010010 


? 


•K 


OlOOOE 


7 


5555 


010010 


7 


6666. 


TENbug 


2.x 


> M 20001;N;O 


020001 


7 


1= 


020001 


7 


8= 


020001 


7 


1= 


020001 


7 


7= 


020001 


7 


• 



COMMENT 

Memory modify location $10000 a longword at a 
time. 

No change to this longword. 

Change this longword to $-5 (or $FFFFFFFB) and 
stop. 

Modify memory location $10008 a word at a time; do 

not read data after updating. 

Place a word of l»s into this location. 

Place a word of 2's into this location. 

Place a word of 3's into this location. 

Place a word of 4's into this location. 

Back up one word. 

Place a word of 5*s over the 4*s in this location. 

Place a word of 6's into this location. 

Place a byte into the odd locations only, without 
reading the data. 

Place a 1 into this memory location and remain at 
the same location. This technique is very useful 
for debugging I/O devices. 

Place a 7 at this memory location and remain at the 

same location. 

Exit the MM command. 
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MM 
M 



TEMbug 2.x > M 49528 ;DI Modify memory starting at $49528 using the 

disassenibler. 



049528 48B800010406 MOVEM.W DO, $0406 ? (CR) 

04952E 40F80406 MOVE.W SR,$0406 ? (CR) 

049532 48E7FFFE MOVEM.L D0-D7/A0-A6r- (A7) ? (^) 

049536 4FF8095A LEA.L $095A,A7 ? MOVE.B 



049536 4FF8095A 
049536 4FF8095A 
04953A 1600 
04953C 04444281 



X?(aR) 

LEA.L $905A,A7 ? (CR) 

MOVE.B D0,D3 ? (CR) 

SUB.W #17025,D4 ? . 



(response to incomplete/ 
incorrect entry) 



TEbJbug 2.x > 



NOTE 



Refer to Chapter 5 for more information 
about the assembler/disassembler. 
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4.2.28 Memory Set (MS) 



MS 



MS <address> <data> 



The Memory Set (MS) command changes the contents of memory. The data entered is 
placed at the location specified by <address>. If the data entered requires 
word alignment and <address> is not even, the byte at <address> is bypassed and 
the data is placed in the next even address. 

Memory Set allows both hexadecimal and ASCII string data within the same line. 
The length of hexadecimal values can also vary. A space is used to delimit each 
field, and an apostrophe must be used to enclose each ASCII string. 

Notice that lowercase is supported within the ASCII string. TENbug's command 
and parameter parser automatically converts all lowercase input into uppercase. 
The only exceptions are the ASCII strings within apostrophes and the data 
entered while in transparent mode. This provides support for users wishing to 
use the terminal in lowercase. The comnnands and operands will work because they 
are converted to uppercase, and, where lowercase is specifically needed, it is 
supported (BS, MS, and TM) . 

The maximum number of bytes that can be entered with one MS <address> <data> 
command is limited to the size of the command line buffer, or 128 bytes. When 
the character in the last position of the first line is entered, an automatic 
CE/LF is sent to the display allowing the user to continue and still read the 
input characters entered. 

EXAMPLE COMMENT 

TENbug 2.x > MP AOO 30 Display memory at start before the MS command. 

OOOAOO 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 
OOOAIO 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 
000A20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 



TENbug 2.x > MS , API 'MS Test' 41 61 42434445 20313233 'End of Data' 

Ehter ASCII string, two bytes, two longwords, and 
another string. (Notice lowercase input.) 



TENbug 2.x > md aOO 30 Now display results with the MD comnand. Notice 

conmand was entered in lowercase. 

OOOAOO 20 4D 53 20 54 65 73 74 20 41 61 42 43 44 45 20 MS Test AaBCDE 
OOOAIO 31 32 33 45 6E 64 20 6F 66 20 44 61 74 61 2E 20 123End of Data. 
000A20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 



TENbug 2.x > BF AOO BOO 4161 

Fill manory with Aa so changes will stand out. 
PHYSICAL ADDRESS=OOOOOAOO OOOOOBOO 



4-50 



TENbug 2.x > MP A70 Display memory near end of what a full buffer can 

change. 

000A70 41 61 41 61 41 61 41 61 41 61 41 61 41 61 41 61 



TENbug 2.x > MS AOO 'This example shows that the MS conroand allows more than one 
line of data in the buffer at a time. Note the CR/LF sent*. 

Enter long ASCII string. 



TENbux 


2.x 


> md aOO 


80 




Display 


a full 128 bytes. 






OOOAOO 


54 


68 


69 


73 


20 


65 


78 


61 


6D 


70 


6C 


65 


20 


73 


68 


6F 


This example sho 


OOOAIO 


77 


73 


20 


74 


68 


61 


74 


20 


74 


68 


65 


20 


4D 


53 


20 


63 


ws that the MS c 


000A20 


6F 


6D 


6D 


61 


6E 


64 


20 


61 


6C 


6C 


6F 


77 


73 


20 


6D 


6F 


omnand allows mo 


000A30 


72 


65 


20 


74 


68 


61 


6E 


20 


6F 


6E 


65 


20 


6C 


69 


6E 


65 


re than one line 


000A40 


20 


6F 


66 


20 


64 


61 


74 


61 


20 


69 


6E 


20 


74 


68 


65 


20 


of data in the 


000A50 


62 


75 


66 


66 


65 


72 


20 


61 


74 


20 


61 


20 


74 


69 


6D 


65 


buffer at a time 


000A60 


2E 


20 


4E 


6F 


74 


65 


20 


74 


68 


65 


20 


43 


52 


2F 


4C 


46 


. Note the CR/LF 


000A70 


20 


73 


65 


6E 


74 


61 


41 


61 


41 


61 


41 


61 


41 


61 


41 


61 


sentaAaAaAaAaAa 



TENbug 2.x > 
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4.2.29 Display Offsets (OF) 



OF 



OF 



The OF command displays the offsets used to assist with relocatability and 
position-independent code. 

Linked segments of code will each have a different load address or offset. For 
user convenience, seven general purpose offsets (.R0-.R6) are provided. Offset 
.R7 is always zero, which provides a convenient technique for entering an 
address without an offset. If no value is assigned to one of the general 
purpose offsets, it will have the default value of zero. 

Unless another offset is entered, each comnand that expects an address parameter 
automatically adds offset RO to the entered address — that is, if RO = 1000, 
the following commands are the same: 

BR 10 (10 + 1000) Offset RO added by default. 

BR lO+RO (10 + 1000) 

BR 1010+R7 (1010 +0) R7 is always zero. 

The physical address for each of these commands is 1010. 



EXAMPLE 








COMMENT 


TENbug 2.x 


> 


.Rl 


1000 


Set offset Rl. 


TENfbug 2.x 


> 


.R3 


33000 




TENbug 2.x 


> 


.R4 


440000 




TENbug 2.x 


> 


.R5 


0 


Reset offset R5. 


TENbug 2.x 


> 


.R6 


-1 




TENbug 2.x 


> 


OF 




Display offsets. 



R0=00000000 Rl=00001000 R2=00000000 R3=00033000 
R4=:00440000 R5=00000000 R6=FFFFE1T'F R7=00000000 

TENbug 2.x > .RO 1200 Set offset RO. 

TENbug 2.x > MM 10 

000010+RO 61 ? Offset RO is added to the address. 

TENbug 2.x > MM 10+R7 R7 is always 0 and, when entered, overrides 

000010 00 ? . RO. 



TENbug 2.x > 



To set RO to 0 after it has been set to a 
non-zero value, use the command ".RO 0+R7". 
The command ".RO 0" will not alter RO. 
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4.2.30 Printer Attach and Detach (PA and NOPA) 



PA 
NOPA 



PA[<port nuinber>] 
NOPA 

The PA caranand allows the user to attach the line printer so that information 
sent to the console terminal will also be printed. (The printer is connected to 
a port on a dual 16-bit parallel port I/Omodule, MVME410, attached to a printer 
board which communicates with the VMEAO system via the I/O Channel, Refer to 
the initial setup instructions in the VMEAO Microcomputer System Diagnostics 
Manual.) The board has two PIA's. TENbug takes the lower addressed PIA as port 
4 and the higher as port 5. Default is always port 4. 

Valid port numbers for this canmand are: 



PORT NUMBER DESCRIPTION 

none Defaults to TENbug port 4 (MVME410 port 1 - PIA/A) . 

4 Specifies TENbug port 4 (MVME410 port 1 - PIA/A) . 

5 Specifies TENbug port 5 (MVME410 port 2 - PIA/B) . 



The printer can also be called by the Memory Display (MD4 or MD5) connmand. 

If the printer is deselected or not ready, the message PRINTER NOT READY will be 
sent to the console terminal. TENbug will wait until the printer is ready or 
the BREAK key is pushed. 

NOTES 

1. Execution of this command when no dual 16-bit parallel port 
module is connected to the I/O Channel may require pressing 
the RESET pushbutton in order to return control to TENbug. 

2. Only one printer port can be attached at a time. 



The NOPA corrmand allows the user to detach the line printer at port 4 or port 5 
fron the console terminal. Output will then be displayed on the console 
terminal only; it will not be printed. 

See also: MD 



EXAMPLE COMMENT 
TENbug 2.x > PAS 
TENbug 2.x > MD 800 90 

000800 FF FF 24 18 FF 7F OC 00 FF 7F 30 04 FF FF 00 00 ..$ 0 

000810 FF 31 FF FF FF 01 FF FF FF 26 FF FF 7F 22 FF FE .1 &..."." 

• 

Output is displayed on console terminal and printed 
at port 5. 

TENbug 2.x > NOPA Future output will be displayed on console terminal 

only. 

TENbug 2.x > 
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4.2.31 Port Format (PF) 



PF 



PF[<port nuraber>] 

The Port Format (PF) command displays or changes the automatic null insertion 
for each character and for each carriage return. Two additional pieces of 
information are displayed: 

a. The address of RAM used to initialize the two 7201 serial ports when the 
optional MVME400 module is installed. 

b. The address of the TENbug option bytes in RAM (affecting transparent mode 
parameters and the environment while tracing) • 

There are two responses when the Port Format (PF) command is entered. If the 
optional MVME400 module is installed, the character null count and the carriage 
return null count are displayed. If the dual serial port is not installed, a 
message notifying the user is displayed. In either event, the RAM locations for 
7201 initialization and the TENbug options are then displayed. 

TENbug 2.x > HF TENbug 2.x > PF 

OPTIONAL MVME400 NOT INSTALLED P0RT2 PORTS 

CHAR NULL= 00 00 
7201 RAM @ xxxxxx C/R NULL = 00 00 

OPTIONS @ YYYYYY 

7201 RAM @ xxxxxx 
OPTIONS @ YYYYYY 



NOTE 

TENbug port 2 corresponds to MVME400 port 2, (7201/B) . 
TENbug port 3 corresponds to ^^/ME400 port 1, (7201/A) . 

If either PF2 or PF3 is entered, the CHAR NULL count (number of nulls to be 
inserted after each character) is displayed followed by a ? prompt. The user 
may then enter a new count or enter a carriage return to move on to the next 
field without change to this parameter. C/R NULL (or the number of nulls to be 
inserted after each carriage return) is the second and last parameter displayed 
for the user to accept or modify as desired. 



If the configuration of either or both of the 7201 serial ports requires 
modification (e.g., number of stop bits, parity), the PF command cannot directly 
make the chaises. Instead, the address v^ere RAM is located for the 
initialization of the ports is displayed on the general display. A Memory 
Modify conmand can be used to alter these hex locations. After a change has 
been made, the serial ports must be forced to reinitialize by entering a PF 
<port nuni)er> coramana. This will place the new RAM data into the 7201 
registers. The contents of the 7201 RAM area at power up or cold start are as 
follows . 
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PF 
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UUUZ 
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n 
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uu 
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o 
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$44 to ctl 




4 


^ o uvy^ kjxuo 0( ^'cix X Ujr 


OOOA 


01 


01 


$01 to ctl 


reg 


0 


Set Up Rl for a read 


OOOC 


00 


00 


$00 to ctl 


reg 


1 


Disable interrupts 


OOOE 


05 


05 


$05 to ctl 


reg 


0 


Set up R5 for a read 


0010 


EA 


EA 


$EA to ctl 


reg 


0 


Set bits/character (write) 


0012 


03 


03 


$03 to ctl 


reg 


0 


Set up R3 for a read 


0014 


El 


El 


$E1 to ctl 


reg 


3 


Set bits/character (read) AUTO 



ENABLE 



See the examples following this discussion for 7201 reconfiguration. 

Three-wire interfaces (TXD, RXD, GND) and other interfaces that do not provide 
full modem flow control (DSR, RTS, CTS, DCD, DTR) can be supported by disabling 
the AUTO ENABLE feature within the 7201 serial controller (register 3, bit 5) . 
In this mode of operation there will not be any flow control in either direction 
with the modem control lines. 

If flow control is desired, for transmission of S-records to and from an 
EXORnacs through an MCX>I for example, the AUTO ENABLE feature can be enabled. 
In addition there are specific jumpers that must be in place to support this 
configuration. For more information on the serial port jumper configuration 
refer to the paragraph in the MVME400 user's manual entitled "CTS Control 
Headers" . 



The following jumper configurations provide flow control with modem control 
lines: 



TENbug PORT 2 
MVME400 PORT 2 

£7 
1-3, 2-4 

MVME400 J9 IS JUMPERED 
(TO TERMINAL) 



EXORnacs 

MCCM (TO MODEM) 



TENbug PORT 3 
MVME400 PORT 1 

J16 

1-3, 2-4 

MVME400 J15 IS JUMPERED 
(TO TERMINAL) 



EXORmacs 

MOCM (TO MODEM) 
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PF 



For compatibility, the format of the "options" RAM area is the same as that used 
in the Educational Computer Board (ECB) firmware TUTOR 1.x. Several items are 
not supported within TENbug, but those that are reside in the same offsets. The 
XON/XOFF characters and auto line feed control are not supported within TENbug 
2.x; as a result the first three bytes in the "options" area are unused. 

Offset $3 within the "options" RAM, a non-$00 byte will inhibit the register 
display at breakpoints and traces. 

Offset $4 contains the Transparent Mode (TM) "trailing" character (the character 
transmitted through port 2 to inform a host system that any characters that 
might be left over from this port are to be flushed) • If this character is $00 
or NUL, there will not be any transmission of a character upon termination of 
transparent mode. 

Offset $5 contains the character that vt^en entered will terminate transparent 
mode and return control to TENbug. 

See also: TM 
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EXAMPLE 



TEtJbug 2.x > PF 

P0RT2 P0RT3 
CHAR NULL= 00 00 
C/R NULL = 00 00 

7201 RAM @ 001314 
OPTIONS @ 001152 

TENbug 2.x > M 1314 ;W 

001314 1818 ? (CR) 

001316 0202 ? (^) 

001318 0000 ? (CR) 

00131A 1414 ? (CR) 

00131C 4444 ? 4144 

00131E 0101 ? (CR) 

001320 0000 ? (CR) 

001322 0505 ? (CR) 

001324 EAEA ? AAEA 

001326 0303 ? (CR) 

001328 ElEl ? 61E1. 

TENbug 2.x > PF 

CHAR NULL= 00 ? (CR) 

C/R NULL = 00 ? (CR) 
TENbug 



PF 

COMMENT 

Reconfigure for 7 bits/character with even parity. 
Display the address of the 7201 initialization RAM. 



(For this example, the address of RAM is $1314. 
This address will vary by TENbug version) . 

Modify areas affecting transmitted/received 
bits/character, number of stop bits, and parity. 



NOTE 

Only the first byte is modified within each 
pair of bytes. In this example, only TENbug 
port 2 (MVME400 port 2 7201/3B) is being 
changed . 



After the RAM has been changed, the 7201 must be 
forced to initialize. PF2 or PF3 will issue serial 
port initialization after accepting the two optional 
variables. 



PF 

In the example below, the AUTO ENABLE bit in control register 3 is turned on for ports 2 and 3 to provide modem 
control line flow control. 



TENbug 2, 

001314 

001316 

001318 

00131A 

00131C 

00131E 

001320 

001322 

001324 

001326 

001328 



X > 
1818 
0202 
0000 
1414 
4144 
0101 
0000 
0505 
AAEA 
0303 
61E1 



M 1314 ;W 
? (CR) 
(^) 
m) 
i^) 
4444 

(^) 
(CR) 
(OR) 
EAEA 
(CR) 
? ClCl. 



Reconfigure both ports to support a 3-wire interface 
(TXD, RXDr and ground only) . 



NOTE 

In this example both the first and second 
bytes are modified (contents of control 
register 3) , disabling the port 2 and port 3 
AUTO ENABLE feature. 



TENbug 2.x > PF2 
CHAR NULL= 00 ? (CR) 
C/R NULL = 00 ? (^) 
TENbug 



Reinitialize the serial ports using the modified RAM. 



The following are exan?)les both with and without register information within trace and breakpoints. 



TENbug 2.x > BR AlO 

BREAKPOINTS 
OOOAIO OOOAIO 

TENbug 2.x > .PC AOO 

TENbug 2.x > T 

PHYSICAL ADDRESS=OOOOOAOO 



Use the "options" bytes displayed by PF. 
Set breakpoint at end of a routine. 

Set program counter at start of routine. 

Trace one instruction. (Note: Gon^lete register 
display for each trace and breakpoint.) 



PO=00000A04 SRf=2704=.S7..Z.. USP=FFFFFFFF SSP=00000B00 YBR=00000000 SFC=2 DFC=7 
DO-7 OOOOPPFF 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
AO-7 00001000 00000000 00000000 00000000 00000000 00000000 00000000 OOOOOBOO 
PC=000A04 203C000002FF MOVE.L $767,D0 



PF 



TENbug 2.x :> ( CR ) Assume Trace (CR after previous trace) . 

PHYSICAL ADDRESS=00000A04 

PC=OOOOOAOA SR=2700=.S7 USP=FFFFFFFF SSP=OOOOOBOO VBR=00000000 SFC=2 DFC=7 

DO-7 000002FF 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
AO-7 00001000 00000000 00000000 00000000 00000000 00000000 00000000 OOOOOBOO 
PC=OOOAOA 1100 MOVE.B DO,- (AO) 



TENbug 2.x :> ^ Allow free running of routine to be stopped by 

PHYSICAL ADDRESS=OOOOOOAOA breakpoint. 

AT BREAKPOINT Once again, full register display. 

PC=:00000A10 SR=2704=.S7..Z.. USP=FFFFFFFF SSP=OOOOOBOO VBR=00000000 SFC=2 DFC=7 
DO-7 OOOOFFFF 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
AO-7 OOOOODOO 00000000 00000000 00000000 00000000 00000000 00000000 OOOOOBOO 
PC=000A10 60EE BRA.S $000A00 



TENbug 2.x > PF 



Request "options" I?AM location with the PF ccxrmand, 



P0RT2 PORTS 
CHAR NULL= 00 00 
C/R NULL= 00 00 



7201 RAM @ 001314 
OPTIONS @ 001152 



Note: Address will vary from example. 



TENbug 2.x > M 1152 

001152 00 ? (CR) 

001153 00 ? (CR) 

001154 00 ? (CR) 

001155 00 ? 1. 



Use address to display, then modify, the fourth byte 
(offset $3) from zero to nonzero to suppress complete 
register display. 



TEbJbug 2.x > .PC AOO 



TENbug 2.x > T 
PHYSICAL ADDRESS=OOOOOAOO 
PC=000A04 203C000002FF MOVE.L #767,00 

TENbug 2.x :> (CR) 
PHYSICAL ADDRESS=00000A04 
PC=OOOAOA 1100 MOVE.B DO,- (AO) 

TENbug 2.x :> (CR) 
PHYSICAL ADDRESS=OOOOOAOA 
PC=OOOAOC 51C8FFPC DBF.L DO,$OOOAOA 



TENbug 2.x :> GO 
PHYSICAL ADDRESS=OOOOOAOC 

AT BREAKPOINT 
PC=000A10 60EE BRA.S $000A00 



TENbug 2.x > 



PF 



Restart routine again. 
Trace one instruction. 



Trace assumed when previous trace followed with 
carriage return. 



Note: Only physical address where execution begins; 
the relative displacement and offset (if used) for 
the PC; the hex value of the instruction; followed by 
the disassembled instruction. 



Breakpoint displays the same abbreviated information. 



»T0 



4.2,32 Transparent Mode (OM) 



TM [<exit character> [<trailing character>] ] 

The TM command, together with an MVME400 dual RS-232C serial port I/Omodule, 
provides terminal support in a dumb terminal fashion until the exit character is 
received. 

Multiple baud rates are supported, however, because the processor supports the 
CRT display in a polling fashion; each time the screen requires scrolling there 
is a delay that can result in lost characters. Baud rates down through 4800 
baud can miss characters on the display. 

The <exit character> is entered right after the TM corrmand itself, though an 
optional space is permitted. Note that CTRL-X, CTRL-D, CTRL-H, CTRL-J, and 
CTRL-M cannot be specified as exit or trailing characters from the IM cdtmand. 
These characters provide control for the terminal (e.g., line delete, redisplay 
the line, backspace) and will not be passed to the IM ccjiraiand from the terminal 
handler. All other characters, both CTRL and non-CTRL, can be entered, 
(Default <exit character> is CTRL-A.) 

The <trailing character> is transmitted to the host port upon receipt of the 
<exit character>. With systems usir^ VERSAdos the standard trailing character 
is a CTRL-X, which cancels anything that might have made it to an input buffer. 
By default CTRL-X is specified as the trailing character so there is no problem 
using it (though if another trailing character were selected, CTRL-X could not 
be entered to reinstate it) . 

There is an alternate way of setting the exit and trailing characters. Since 
they are stored in RAM, any user knowing the location of these characters could 
use a Memory Modify (MM) conmana to alter those values. By issuing a Port 
Format (PF) command the address of the TENbug option bytes is displayed at the 
end of the display. 

Trailing character is located at offset $4 
Exit character is located at offset $5 

In systons where no data at all must be sent upon exit of transparent mode, the 
trailing character can be charged to $00 using Memory Modify within the option 
bytes. With the trailing diaracter as NUL, there is no data sent at exit time. 

Only TENbug port 2 (MVME400 port 2, 720 1/B) is supported as the transparent 
port. Even though the other ports may have output directed to them (e.g., MD3, 
DU3) , they are not supported for transparent mode. 
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EXAMPLE 

TE^Jbug 2,x > TM 
♦TRANSPARENT* EXIT=$01 = CTL A 



TENbug 2.x > TM (CTRL-S ) 

♦TRANSPARENT* EXIT=$13 = CTL S 

TENbug 2,x > PF 

P0RT2 PORTS 
CHAR NULL= 00 00 
C/R NULL = 00 00 

7201 RAM @ 001314 
OPTIONS @ 001152 

TENbug 2.x > M 1152 ;W 
001152 0000 ? (^) 
001154 0000 ? {CR) 
001156 1813 ? OOlC. 



TENbug 2.x > TM 

*TRANSPARENT* EXIT=$1C = CTL \ 

TENbug 2.x > M 1156 ;W 
001156 OOlC ? 1801. 

TENbug 2.x > TM 

*TRANSPARENT* EXIT =$01 = CTL A 

TENbug 2.x > 



COMMENT 

Request default exit and trailing character by 
entering only TM. 

TENbug responds with both hex and CTRL display of exit 
character. 

Specify CTRL-S as exit character with TM (hold down 
the CTRL key and press the S key) • TENbug responds 
with hex 13 and CTL-S, verifying what was entered. 

Use PF command to show where the TENbug option 
variables are located within RAM. 



Use Memory Modify corrmand to display the trailing 
character ($18) and the current exit character ($13) . 
■flien change the trailing character to prevent 
transmission of any data upon exit (refer to the 
discussion of null trailing characters) and change 
exit character to a CTRL-\ (control backslash) . 

Enter a TM carmand without any operands and the 
previous values will be used, as changed by Memory 
Mcxaify. 

Change trailing character back to CTRL-X and exit 
character to CTRL-A. 

Enter TM without operands and the CTRL-A exit 
character is verified. 



4,2.33 Trace (TR) 



TR 
T 



T[R] [<count>] 



The Trace (T or TR) canmard executes instructions one at a time, beginning at 
the location pointed to by the program counter. After execution of each 
instruction, the MC68010 registers are displayed. 

When the trace mode is entered, the prompt includes a colon (i.e., 
TENbug 2.x :>), While in this mode, typing only a carriage return will cause 
one instruction to be traced. 

Breakpoints and breakpoint counts are in effect during trace. 

Trace cannot be used to st^ through interrupts or exceptions (e.g., TRAP). 

COMMAND FORMAT DESCRIPTION 

TENbug 2.x > T Trace one instruction. 

TENbug 2.x :> TR <count> Trace <count> instructions, 

TENbug 2,x :> ( CR ) Carriage return (CR) executes next instruction. 

TENbug 2.x :> MP 1000 Typing the next command exits trace mode. 



NOTE 

If the program counter contains an address that falls between 
the starting and ending addresses of the TENbug program, 
the warning message .PC within "DEBUGGER" will be returned. 
Processing will continue with unexpected results if stack 
pointers and/or registers are not handled properly. 



See also: DF, GO, GT, TT 
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EXAMPLE: 



TENbug 2.x > .PC 2000 

TENbug x.y > TR 

PHYSICAL ADDRESS=00002000 

PC=00002002 SR=2700=.S7 USP=FFFFFFFF SSP=00000800 VBR=00000000 SFC=2 DFC=2 

DO-7 00304E71 00002000 C05E2000 00000000 1796AF30 00000020 00000000 00000000 

AO-7 00F021CA 00000000 00002000 00000458 00000410 00000551 00000551 OOOOOSOO 
PC=002002 

TENbug x.y :> (OR) 
PHYSICAL ADDRESS=00002002 
PC=00002004 

DO-7 00304E71 00002000 C05E2000 00000000 1796AF30 00000020 00000000 00000000 
AO-7 00F021CA 00000000 00002000 00000458 00000410 00000551 00000551 00000800 
PC=002004 

TENbug x.y :> T 2 
PHYSICAL ADDRESS=00002004 

PC=00002006 SR==2700=.S7 USP=FFFFFFFF SSP=00000800 VBR=O000O0O0 

DO-7 00304E71 00002000 C05E2000 00000000 1796AF30 00000020 00000000 
AO-7 00F021CA 00000000 00002000 00000458 00000410 00000551 00000551 
PC=002006 

PC=00002008 SR=27P0=.S7 USP=FFFFFFFF SSP=00000800 VBR=00000000 

DO-7 00304E71 00002000 C05E2000 00000000 1796AF30 00000020 00000000 
AO-7 00F021CA 00000000 00002000 00000458 00000410 00000551 00000551 
PC=002008 

TENbug 2.x :> 



SFC=2 DFC=2 

00000000 

00000800 

SFC=2 DFC=2 

00000000 

00000800 
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4.2.34 Trace to Toiporary Breakpoint (TT) TT 



TT <breakpoint address> 

The TT command performs the following: 

a. Sets a temporary breakpoint at the address specified. 

b. Starts program execution in the trace mode. 

c. Traces until any breakpoint with a zero count is encountered. 

d. Resets the tenporary breakpoint. 

The temporary breakpoint is not displayed by the BR ccxrmand. 

See also: DF, 00, QT, TR 

EXAMPLE 

TENbug 2.x > .PC 2000 

TENbug 2.x > TT 2006 
PHYSICAL ADDRESS=0 0002006 
PHYSICAL ADDRESS=00002000 

PC=00002002 SR=2700=.S7 USP=FFFFFFFF SSP=00000800 VBR=00000000 SFC=2 DFC=2 

DO-7 00304E71 00002000 C05E2000 00000000 1796AF30 00000020 00000000 00000000 
AO-7 00F021CA 00000000 00002000 00000458 00000410 00000551 00000551 00000800 
PC=002002 

PC=00002004 SR=2700=.S7 USP=FFFFFFFF SSP=00000800 VBR=00000000 SFO=2 DFC=2 

DO-7 00304E71 00002000 C05E2000 00000000 1796AF30 00000020 00000000 00000000 
AO-7 00F021CA 00000000 00002000 00000458 00000410 00000551 00000551 00000800 
PC=002004 

AT BREAKPOINT 

PC=00002006 SR=2700=.S7 USP=FFFFFFFF SSP=0 0000800 VBR=00000000 SFC=2 DFC=2 

DO-7 00304E71 00002000 C05E2000 00000000 1796AF30 00000020 00000000 00000000 
AO-7 00F021CA 00000000 00002000 00000458 00000410 00000551 00000551 00000800 
PC=002006 

TENbug 2.x :> 
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4.2.35 Verify (S-Records) (VE) 



VE 



VE[<port nuniber>] [;<options>] =<text> 



The VE connmand pr^ares the VME/10 to receive S-records frcm the designated 
<port number> and then transmits the <text> following the = sign to the system 
connected to the <port number> indicated. As the S-records are received, the 
bytes are compared one by one with the contents of memory. If all bytes are 
correct, the TENbug prompt is returned. However, if any data does not compare, 
a message in the following format is displayed: 

S lEiEiaaaa —DD .""."*.—.—•"* 

or 

SSLLaaaaaa .""•■"."".■".—.*".—.""."*. —DD .—.—•—.—.— 

where: 

SI or S2 Is the S-record type (note size of address) • 

LL Is the length of the data contained within the checksum. 

aaaa or aaaaaa Is the address that this S-record verifies. 

Are characters that verify correctly. 

DD. Represents the contents of the S-record where data was 

found to be different. 



Refer to Appendix D for a discussion of S-record content. 



The following options are supported: 

;-C Ignore validation of the checksum on each S-record v^ile loading. 

;X Echo the S-records read to the VME/10 built-in terminal. 

The VE ccmmana requires that a dual serial I/Omodule (MVME400) be available on 
the I/O Channel. Note that serial ports 2 and 1 on the MVME400 correspond to 
TENbug ports 2 and 3, respectively. 

Default source is the TENbug port 2, Specifying VE<portnumber> allows the input 
to be received from other ports. 

Valid port numbers for this comnnand are: 

PORT NUMBER DESCRIPTION 



none Defaults to TENbug port 2 (MVME400 port 2 - 7201/B) . 

1 Specifies TENbug port 1 (VME/10 built-in terminal/keyboard). 

2 Specifies TENbug port 2 (MVME400 port 2 - 7201/B) . 

3 Specifies TENbug port 3 (MVME400 port 1 - 7201/A) . 
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VE 



EXAMPLE 



COMMENT 



TENbug 2.x > BF POO EOO 4161 
PHYSICAL ADDRESS=OOOOODOO OOOOOEOO 

TENbug 2.x > MP POO 

OOOPOO 41 61 41 61 41 61 41 61 



TENbug 2.x > LP =DU OOP D80 
POO P80 



TENbug 2.x > MP POO 8F 



Initialize RAM to known pattern. 

41 61 41 61 41 61 41 61 AaAaAaAaAaAaAaAa 
Pi splay memory. 

Enter LO caimand which contains a Pump 
(PU) canmand for an Educational 
Computer Board (BCB) . 



Pisplay RAM 
transferred. 



to see if data 



was 



OOOPOO 


00 


01 


02 


03 


04 


05 


FF 


FF 


08 


09 


OA 


OB 


OC 


OP 


OE 


OF 




OOOPIO 


10 


11 


12 


13 


14 


15 


16 


17 


18 


19 


lA 


IB 


IC 


IP 


IE 


IF 




000P20 


20 


21 


22 


23 


24 


25 


26 


27 


28 


29 


2A 


2B 


2C 


2P 


2E 


2F 


!"#$%&•()*+,-./ 


000P30 


30 


31 


32 


33 


34 


35 


36 


37 


38 


39 


3A 


3B 


3C 


3P 


3E 


3F 


0123456789: ;<=>? 


000P40 


40 


41 


42 


43 


44 


45 


46 


47 


48 


49 


4A 


4B 


4C 


4P 


4E 


4F 


@ABCPEFGHIJKLMNO 


000P50 


50 


51 


52 


53 


54 


55 


56 


57 


58 


59 


5A 


5B 


5C 


5P 


5E 


5F 


PQRSTUVWXYZ [\] 


000P60 


60 


61 


62 


63 


64 


65 


66 


67 


68 


69 


6A 


6B 


6C 


6P 


6E 


6F 


' abcdef ghi jklmno 


000P70 


70 


71 


72 


73 


74 


75 


76 


77 


78 


79 


7A 


7B 


7C 


7P 


7E 


7F 


pqrstuvwxyz { | } " . 


000P80 


80 


61 


41 


61 


41 


61 


41 


61 


41 


61 


41 


61 


41 


61 


41 


61 


• aAaAaAaAaAa AaAa 



TENbug 2.x > M P78 
000P78 78 ? 88. 

TENbug 2.x > M PIA 
OOOPIA lA ? OA. 

TENbug 2.x > VE =PU POO P80 
PU POO P80 

S1130PlO.-.~.-.-.-.-.-.-.-.-lA, 
S1130P70. -.-78.-.-, 



TENbug 2.x > M PlA 
OOOPIA OA ? lA. 

TENbug 2.x > M P78 
000P78 88 ? 78. 

TENbug 2.x > VE =PU POO P80 



Alter two bytes with Memory Modify to see 
if Verify can detect incorrect bytes. 



Enter the Verify canmand requesting the 
same S-records be transmitted. 



Two errors are detected. 

Use Memory Modify to change the two bytes 
back to the correct values. 



Invoke the Verify coonmand again; 
errors are detected this time. 



no 



TENbug 2.x > 
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4.2.36 Video (VM) VM 



VM 



The VM ccxranand toggles the high-resolution bit (bit 4 of control register 1) , 
causing VME/10 RAM to be remapped. This enables use of both low- (800 x 
300-pixel matrix) anS high- (800 x 600-pixel matrix) resolution graphics display 
mode. 



WARNING 

WHEN THE VM COMMAND IS USED, ALL VMEAO 
RAM IS REARRANGED AND MUST BE RELOADED. 



The user enters TENbug in the high-resolution mode (bit set to 1) , with memory 
mapped accordingly. The basic TENbug prompt appears: 

TENbug 2.x > 

When the VM cormand is entered (bit changed to 0) , the memory map is reorganized 
for low resolution mode and a modified prompt appears which signifies that low 
mode is in effect: 

TENbug 2.x m> 

However, the actual display matrix does riot change. By remapping VME/10 memory, 
RAM space is provided for the user to modify the display by r^rograraming the 
CRT controller device (MC6845) that defines the video screen. 

Entering the VM conmand again will remap RAM for high-resolution mode. 

Descriptions and memory maps for both low- and high-resolution modes appear in 
the VME/10 Microcomputer System Reference Manual. 



EXAMPLE CX)MMENT 

TENbug 2,x > VM_ While in high-resolution mode, use VM 

conmand to enter low-resolution mode. 

TENbug 2.x m> \^ New prompt indicates low-resolution mode. 

Enter VM command again to return to 
high-resolution mode. 

TENbug 2.x > 
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4.3 COMMAND SUMMARY 

The commands and options available to TENbug 2.x users are sunmarized in Table 4-2. 

TABLE 4-2. TENbug Conmand and Option Suttmary 



COMMAND 



DESCRIPTION 



[NO] BARS 

BF <addressl> <address2> <pattern> 

BH [<device>] [,<controller>] 

BI <addressl> <address2> 

BM <addressl> <address2> <address3> 

BO [<device>] [,<controller>] [,<string>] 

[ NO] BR [ <address> [ ; <count> ] ] . . . 

BS <addressl> <address2> '<literal string>' 

<addressl> <address2> <data>[<masl?>] [;<option>] 

BT <addressl> <address2> 

[NO]CH [<bits>] 

CRT 

CS [<addressl>] [<address2>] 

DC <expression> 

DF 

DU[<port number>] <addressl> <address2> [<text>] 
GD [<address>] 



Draw graphics test pattern. 
Block fill. 
Boot and halt. 
Block initialize. 
Block move. 

Boot operating system. 

Set and remove breakpoints. 

Block search; options ;B ;W ;L. 

Block test. 

Alter character display map. 
Alter CRT control registers. 
Checksum. 

Data conver s ion/evaluat ion . 
Display formatted registers, 
IXimp memory (S-records) . 
Go direct. 



TABLE 4-2. TENbug Conanard and Option Sunmary (cont'd) 



COMMAND 



DESCRIPTION 



G[0] [<address>] 
[NO]GR [<bits>] 

GT <temporary breakpoint address> 

HE 

IOC 

lOP 

lOT 

LO[<port niihber>] [;<options>] =<text> 

MD[<port number >] <address> [<count>] [;<options>] 

M [M] <address> [ ;<options>3 

MS <address> <data> 

OF 

[NO]PA[<port number>] 
PF[<port number>] 

IM [<exit character> [<trailing character>]] 

T[R] [<count>] 

TT <breakpoint address> 

VE[<port number>] [;<options>] =<text> 

VM 



Install breakpoints and go. 

Alter graphics display map. 

Go until address. 

Display coninands/reg i s ters . 

Issue RWINl comnand. 

Issue physical read/write. 

Teach RWINl a configuration. 

Load (S-records) • 

Memory display; options ;DI ;S. 

Memory modify; options ;W ;L ;0 ;V ;N ;DI. 

Memory set (also ASCII) . 

Offset register display. 

Printer attach/detach. 

Port format. 

Transparent mode. 

Trace. 

Trace until address. 
Verify (S-records) . 
Toggle video map. 



TABLE 4-2. TENbug Command and Option Summary (cont'd) 



DESCRIPTION 



Display/set address register. 
Display/set data register. 
Display/set destination function code. 
Display/set program counter. 
Display/set relative offset register. 
Display/set source function code. 
Display/set status register. 
Display/set supervisor stack pointer. 
Display/set user stack pointer. 
Display/set vector base register. 



COMMAND 



(See description of .<register> commands) 

.AO - .A7 [<expression>] 

•DO - .D7 [<expression>] 

.DEC [<expression>] 

.PC [<expression>] 

.RO - .R6 [<expression>] 

•SFC [<expression>] 

.SR [<expression>] 

.SSP [<expression>] 

•USP [<expression>] 

.VBR [<expression>] 



Key Functions: 



(BREAK) Abort comnand or process. 

(DEL) Delete character. 

(CTRL-D) Redisplay line. 

(CTRL-H) Delete character. 

(CTRL-W) Suspend output; any character continues, 

(CTRL-X) Cancel ccxnmand line. 

(< — I) Process current/previous command line. 



CHAPTER 5 
USING THE ASSEMBLED/DISASSEMBLER 



5.1 INTRODUCTION 

Included as part of the VME/10 TENbug 2.x firmware is an assonbler/disassoiibler 
function. The assembler/disasseribler is an interactive assembler/editor in 
which the source program is not saved. Each source line is translated into the 
proper MC68010 machine language code and is stored in memory on a line-by-line 
basis at the time of entry. In order to display an instruction, the machine 
code is disassembled, and the instruction mnemonic and operands are displayed. 
All valid MC68010 instructions are translated. 

The VME/10 assembler is effectively a subset of the MC68010 Resident Structured 
Assembler. It has more limitations than the resident assembler, such as not 
allowing line numbers and labels? however, it is a powerful tool for creating, 
modifying, and debugging MC68010 code. 



5.1.1 M68010 Assembly Language 

The symbolic language used to code source programs for processing by the 
assembler is called M68010 assembly language. This language is a collection of 
mnononics representing: 

. Operations 

- MC68010 machine- instruct ion operation codes 

- Directive (pseudo-op) 

. Operators 

. Special symbols 



5.1.1.1 Machine- 1 ns truct ion Operat ion Codes . That part of the assembly 
language that provides mnemonic machine- ins truct ion operation codes for the 
MC68010 machine instructions is described in the M68000 16/32-Bit Microprocessor 
Programmer's Reference Manual. The user should refer to this manual. 



5.1.1.2 Directives . The assembly language can contain mnemonic directives 
which specify auxiliary actions to be performed by the assembler. Directives 
are not always translated to machine language. 

Assembler directives assist the programmer: 

. In controlling the assembler output 
. In defining data an3 symbols 
. In allocating storage 

The VME/10 assembler recognizes only one directive called define constant 
(DC.W) . This directive is used to define data within the program. Refer to 
paragraph 5.2.4 for a description of this directive. 
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5.1.2 Ccxnparison with MC68000 Resident Structured Assonbler 

There are several major differences between the VME/10 assembler and the MC68000 
Resident Structured Assembler. The resident assembler is a two-pass assembler 
that processes an entire program as a unit, v*iile the VME/10 asseiibler processes 
each line of a program as an individual unit. Due mainly to this basic 
functional difference, the capabilities of the TENbug 2.x assembler are more 
restricted: 

a. Label and line numbers are not used. Labels are used to reference other 
lines and locations in a program. The one-line assembler has no 
knowledge of other program lines and, therefore, cannot make the required 
association between a label and the label definition located on a 
separate line. 

b. Source lines are not saved. In order to read back a program after it has 
been entered, the machine code is disassembled and then displayed as 
mnem3nic and operands. 

c. Limited error indication. The one-line asseiribler will show a question 
mark (?) under the portion of the source statement where an error 
probably occurred, or will display the word "ERROR" or another short 
message. In contrast, the resident assembler generates specific error 
messages for over 60 different types of errors. 

d. Only one directive (DC.W) is accepted. 

e. No macro operation capability is included. 

f . No conditional assertbly is used. 

g. Several syiriaols recognized by the resident assembler are not included in 
the VME/10 assembler character set. These symbols include !, >, and <. 
Two other syntools, * and /, each have multiple meanings to the resident 
assembler, depending on the context, but only one meaning to the VME/10 
assembler. Finally, the ampersand character (&) specifies a decimal 
number when used with the TENbug 2.x assembler (although numbers with no 
prefix are assumed to be decimal) , while this symbol represents a logical 
AND function to the resident assoiibler. Paragraph 5.2.1.5 describes the 
VMEAO assembler character set. 

Although functional differences exist between the two assemblers, the one-line 
assembler is a true subset of the resident assembler. The format and syntax 
used with the TENbug 2.x assembler are acceptable to the resident asse[nbler 
except as described in g. above. 



5.2 SOURCE PROGRAM CODING 

A source program is a sequence of source statements arranged in a logical way to 
perform a predetermined task. Each source statement occupies a line and must be 
either an executable instruction or a DC.W assembler directive. Each source 
statement follows a consistent source line format. 
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5.2.1 Source Line Format 

Each source statement is a combination of operation and, as required, operand 
fields; line nurnbers, labels, and comments are not used. The general format is: 

<sp> <operation field> [<operand field>] 

The space (<sp>) must be the first character of each line. This is to be 
consistent with the resident assembler, v^ich expects the first field of each 
line to be either a space or a label. Because the TENbug 2.x assembler never 
allows a label, the first character must always be a space. 



5.2.1.1 Operation Field . The operation field must follow at least one space 
(more can be used) and entries can consist of one of two categories: 

a. Operation codes which correspond to the MC68010 instruction set. 

b. Define constant directive (DC.W) which is recognized to define a 
constant in a word location. This is the only directive recognized by 
the assembler. 

The size of the data field affected by an instruction is determined by the data 
size code. Some instructions and directives can operate on more than one data 
size. For these operations, the data size code must be specified or a default 
size ^plicable to that instruction will be assumed. The size code need not be 
specified if only one data size is permitted by the operation. The data size 
code is specified by a period (.), appended to the operation field, and followed 
by B, W, or L, where: 

B = Byte (8-bit data) . 

W = Word (the usual default size; 16-bit data) . 
L = Longword (32-bit data) . 

The data size code is not permitted, however, when the instruction or directive 
does not have a data size attribute. 

Examples (legal) : 

LEA 2(A0),Al Longword size is assumed (.B,.W not allowed); this 

instruction loads effective address of first operand 
into Al. 

This instruction adds the byte whose address is (AO) to 
lowest order hyte in DO. 

This instruction adds low order word of Dl to low order 
word of D2. (W is the default size code.) 

This instruction adds entire 32-bit (longword) contents 
of A3 to D3c. 



Illegal size specification (.B not allowed on SUBA) . 
This instruction would have subtracted the value 5 from 
the low order byte of Al; byte operations on address 
registers are not allowed. 



ADD.B (AO) ,D0 

ADD D1,D2 

ADD.L A3,D3 

Example (illegal): 
SUBA.B #5,A1 
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5.2.1.2 Operand Field . If present, the operand field follows the operation 
field and is separated from the operation field by at least one space. When two 
or more operand subfields appear within a statement, they must be separated by a 
comma. In an instruction like * ADD D1,D2' the first subfield (Dl) is generally 
applied to the second subfield (D2) and the results placed in the second 
subfield. Thus, the contents of Dl are added to the contents of D2 and the 
result is saved in register D2. In the instruction ' MOVE D1,D2' the first 
subfield (Dl) is the sending field and the second subfield (D2) is the receiving 
field. In other words, for most two-operand instructions, the general 
format '<opcode> <source>,<destination>' ^plies. 



5.2.1.3 Disassembled Source Line . The disassembled source line may not look 
identical to the source line entered. The disassembler makes a decision on how 
to r^resent a numerical value based on how it interprets the number's use. If 
the number is determined to be an address or a "would-be" address, it is 
displayed in hexadecimal; everything else is decimal. For example, 

MOVE.L #$1234, $5678 

disassaiibles to 

005000 21FC000012345678 MOVE.L #4660, $00005678 

Also, for some instructions, there are two valid mnemonics for the same opcode, 
or there is more than one assoriibly language equivalent. The disassembler may 
choose a form different from the one originally entered. As examples: 

a. H^A is returned for BT 

b. DBF is returned for DBRA 

NOTE 

The assembler recognizes two forms of mnemonics for two 
branch instructions. The BT form (branch conditionally 
true) has the same opcode as the BRA instruction. Also, 
DBRA (decrement and branch always) and DBF (never true, 
decrement, and branch) mnemonics are different forms for 
the same instruction* In each case, the assembler will 
accept both forms. 



5.2.1.4 Mnemonics and Delimiters . The assembler recognizes all MC68000 
instruction mnemonics except ILLEGAL. Numbers are recognized as both decimal 
and hexadecimal, with decimal the default case (note that this is reverse to the 
TENbug 2.x commands) ; 

a. Decimal is a string of decimal digits (0-9) without a prefix (default) or 
preceded by an optional ampersand (&) . Exanples are: 

1234 
&1234 

b. Hexadecimal is a string of hexadecimal digits (0-9, A-F) preceded by a 
dollar sign ($) . An example is: 

$AFE5 
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One or more ASCII characters enclosed by apostrophes (') constitute an ASCII 
string. ASCII strings are left-justif ied and zero-filled (if necessary) , 
whether stored or used as iitimediate operands. This left justification will be 
to a word boundary if one or two characters are specified^ or to a longword 
boundary if the string contains more than two characters. 

005000 5300 DC.W 'S' 

005002 223C41424344 MOVE.L #'ABCD»,D1 

005008 3536 DC.W '56' 



NOTE 

The MC68000 has seventeen 32-bit registers (D0-D7, A0-A6, SSP, USP) 
in addition to a 32-bit program counter (24 bits available) and a 16- 
bit status register. Registers D0-D7 are used as data registers for 
byte, word, and longword operations. Registers A0-A6 and SSP and USP 
are used as software stack pointers and base address registers; they 
may also be used for word and longword data operations. All 17 
registers may be used as index registers. Register A7 is a pseudo 
register, used as the system stack pointer corresponding to either 
SSP or USP, depending on the operating state. 



The following register mnemonics are recognized by the assembler: 



D0-D7 Data registers. 

A0-A7 Address registers. 

SSP Address register 7 represents the supervisor stack pointer of the 

active system state. 

USP User stack pointer. Used only in privileged instructions which 

are restricted to supervisory state. 

CCR Condition code register (low 8 bits of SR) . 

SR Status register. All 16 bits may be modified in the supervisor 

state. Only low 8 bits (CCR) may be modified in user state. 

PC Program counter. Used only in forcing program counter-relative 

addressing. 

VBR Vector base register, contains the 32-bit absolute address of the 

beginning of the exception vector. 

SFC Source function code. 

DFC Destination function code. 
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5.2.1.5 Character Set . The character set recognized by the TENbug 2.x 
assembler is a subset of ASCIIs and these are listed below: 

a. The uppercase letters A through Z 

b. The integers 0 through 9 

c. Arithmetic operators: + - 

d. Parentheses ( ) 

e. Characters used as special prefixes: 

# (pound sign) specifies the immediate form of addressing 

$ (dollar sign) specifies a hexadecimal number 

& (ampersand) specifies a decimal number 

(3 (commercial at sign) specifies an octal number 

% (percent sign) specifies a binary number 

' (apostrophe) specifies an ASCII literal character 

f. Five separating characters: 

Space 
f (connma) 
. (period) 
/ (slash) 
- (dash) 

g. The character * (asterisk) indicates current location. 
5.2.2 Instruction Summary 

Refer to the M68000 16/32-Bit Microprocessor Prograitmer ' s Reference Manual for 
descriptions of the MC68000 instructions and addressing modes. 
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5.3 ENTERING AND MODIFYING SOURCE PROGRAMS 



User programs are entered into the VME/10 RAM using the one-line assenibler/ 
disassembler. The program is entered in assembly language statements on a 
line-by-line basis. The source code is not saved as it is converted immediately 
to machine code upon entry. This imposes several restrictions on the type of 
source line that can be entered. 

Symbols and labels, other than the defined instruction mnemonics, are not 
allowed. The assembler has no means to store the associated values of the 
symbols and labels in lookup tables. This forces the programmer to use memory 
addresses and to enter data directly rather than use labels. 

Also, editing is accomplished by retyping the entire new source line. Lines can 
be added or deleted by moving a block of memory data to free up or delete the 
appropriate number of locations. 

In order to describe more clearly the procedures used to enter, modify, and 
execute a program, a specific example will be described. Figure 5-1 lists a 
program that converts an ASCII coded number into its hexadecimal equivalent. An 
ASCII character is in the lowest 8 bits of register DO when the program is 
entered. Upon exiting, DO contains the equivalent hexadecimal digit (0 to F) , 
or an FF if the ASCII character does not correspond to a proper hex number. 



GTHXl 

EXIT 

GTHX2 



GETHEX 



CMP.B 
BLT.S 
CMP.B 
BGT.S 
AND.L 
BRA 



#$30, DO 
ERROR 
#$39, DO 
GTHX2 
#$F,DO 



IS HEX NO. < 0? 
NOT A HEX NO. 
IS HEX NO. > 9? 



SAVE ONLY LOWER 4 BITS 

END OF ROUTINE 

IS HEX NO. < 'A'? 

NOT A HEX NO. 

IS HEX NO, > 'F'? 

NOT A HEX NO. 

MAKE IT SMALLER ~ A=10 



CMP.B 
BLT.S 
CMP.B 
BGT.S 
SUB.B 
BRA 



#$41,D0 

ERROR 

#$46,D0 

ERROR 

#7, DO 

GTHXl 



ERROR 



MOVE.L 
JMP 



#$FF,DO 
EXIT 



ERROR CODE 



NOTE: Converts ASCII digit in lowest 8-bit of register DO into 
hex value. Returns equivalent O-F or FF on error in DO. 



FIGURE 5-1, Sample Program to Convert ASCII Digit to Hexadecimal Value 



For clarity. Figure 5-1 contains comments and labels. The program as it appears 
after entry into the VME/10 is shown in Figure 5-3. Figure 5-2 shows the ASCII 
character set for better understanding of the program. 



b6 


0 

0 

n 

w 


0 

, 0 


0 

1 

n 

V 


0 

1 

1 


1 

0 

0 


1 

0 

1 

1 


1 

1 

A 


1 

1 

1 


b4 


b3 


b2 


b1 




Column 


If 


4 

1 




J 


4 


_5_ _ 


0 


7 


1 


I 


1 


I 


Row 


Hex 


0 


1 


2 


3 


4 


5 


6 


7 


0 


0 


0 


0 


0 


0 


NUL 


OLE 


SP 


0 


(9 
w 


p 




V 


0 


0 


0 


1 


1 


1 


SOH 


DC1 


1 


1 


A 


0 


a 


a 


0 


0 


1 


0 


2 


2 


STX 


DC2 




2 


B 


R 


b 


r 


0 


0 


1 


1 


3 


3 


C 1 A 




g 
w 


•a 

<j 




e 

d 


c 


s 


0 


1 


0 


0 


4 


4 


EOT 


0C4 


$ 


4 


0 


T 


d 


t 


0 


1 


0 


1 


5 


5 


ENQ 


NAK 


% 


5 


E 


U 


e 


u 


0 


1 


1 


0 


6 


6 


ACK 


SYN 


& 


6 


F 


V 


f 


V 


0 


1 


1 


1 


7 


7 


BEL 


ETB 




7 


G 


w 


-,...2— 


w 




0 


0 


0 


8 


8 


BS 


CAN 


( 


8 


H 


X 


h 


X 




"S" 


0 


1 


^ 


9 


HT 


EM 


) 


9 


1 


Y 


i 


y 




0 


1 


0 


10 


A 


LF 


SUB 






J 


Z 


i 


z 






1 


1" 


IT" 


B 


VT 


ESC 


+ 




K 


I 


k 






1 


0 


0 


12 


C 


FF 


FS 




< 


L 


\ 


1 


1 




1 


0 


1 


13 


D 


CR 


GS 






M 


1 


m 


1 




1 


1 


0 


14 


E 


SO 


RS 




> 


N 


A 


n 






1 


1 


1 


15 


F 


SI 


US 


/ 


? 


0 




0 


DEL 



FIGURE 5-2. ASCII Character Set 
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5.3.1 Invoking the Assonbler/Disassembler 

The asserabler/disassennbler is invoked using the ;DI option of the Memory Modify 
(MM) and Memory Display (MD) commands: 

MM <address> ;DI 

where (CR) sequences to next instruction 

(.CR ) exits command 

and 

MD[<port number>] <address> [<count>] ;DI 

The Memory Modify (;DI option) is used for program entry and modification. When 
this command is used, the manor y contents at the specified location are 
disassembled and displayed, followed by a "?". A new or modified line can be 
entered if desired. 

The disassembled line can be an MC68000 instruction or a EC.W directive. If the 
disassembler recognizes a valid form of some instruction, the instruction will 
be returned; if not, the DC.W $xxxx (always hex) is returned. Because the 
disassembler gives precedence to instructions, a word of data that corresponds 
to a valid instruction will be returned as the instruction. 

For the given example, the program will be entered starting at location $1000: 

TENbug 2.x > MM 1000 ;DI 

001000 1005 MOVE.B D5,D0 ? 



5.3.2 Entering a Source Line 

A new source line is entered immediately following the "?", using the format 
discussed in paragraph 5.2.1: 

TENbug 2.x > MM 1000;DI 

001000 1005 MOVE.B D5,D0 ? CMP.B #$30, DO 

When the carriage return is entered terminating the line, the old source line is 
erased from the terminal screen, the new line is asserrbled and displayed, and 
the next instruction in memory is disassembled and displayed: 

TElSIbug 2.x > MM 1000 ;DI 

001000 0C000030 CMP.B #$30,D0 

001004 FFFF DC.W $FFFF ? 



NOTE 

If a terminal with a printer only (no CRT) is used, such as a TI 700 
series device, the printer will overwrite the previous line. There- 
fore, a clear printout of the new entry will not be made. This also 
happens if the printer on port 3 is attached via the PA comnand. 



5-9 



Another program line can now be entered. Program entry continues in like manner 
until all lines have been entered. A period is used to exit the MM cottinand. 

If an error is encountered during assembly of the new line, the assenibler will 
display the line unassembled with an "X" under the field suspected of causing a 
problem, or an error message will be displayed. Errors are discussed in 
paragraph 5.3.5. 



5.3.3 Program Entry/Branch and Jump ASdresses 

Figure 5-3 shows the sample program as it is input to the VME/10 one-line 
assembler. Notice that the conments and labels used in Figure 5-1 are not 
allowed; absolute addresses must be used for BRA and JMP instructions. 



CMP.B 


#$30, DO 


CMP.B 


#$30,D0 


BLT 


* 


BLT 


$1022 


CMP.B 


#$39, DO 


CMP.B 


#$39, DO 


BGT 


* 


BGT 


$1014 


AND.L 


#$F,DO 


AND.L 


#$F,DO 


BRA 


* 


BRA 




CMP.B 


#$41,D0 


CMP.B 


#$41,D0 


BLT 


* 


BLT 


$1022 


BGT 


* 


BGT 


$1022 


SUB.B 


#7, DO 
$100C 


SUB.B 


#7, DO 
$100C 


BRA 


BRA 


MOVE.L 


#$FF,DO 


MOVE.L 


#$FF,DO 


JMP 


$1012 


JMP 


$1012 



a) First entry b) With correct branch addresses 



FIGURE 5-3. Sample Program as Entered into VME/10 



5.3.3.1 Entering Absolute Addresses . The absolute addresses are probably not 
known as the program is being entered. For example, when the second line is 
entered (BLT.S ERROR in Figure 5-1) , the user does not know that the branch 
address (ERROR MOVE.B #$FF,DO) will be $1022. However, the user can instead 
enter an "*" for branch to self. After the correct address ($1022) is 
discovered, the second line can be reentered using the correct value. This 
technique can be used for forward branches and jumps. It is not required for 
backward branches and jumps, such as the last line of the example, because the 
required address is already known. If the absolute address is not within the 
range of a short address, a long address must be specified by appending .L to 
the mnemonic (BGT.L *) . 
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5 •3.3.2 Desired Instruction Form . Care must be taken vitien entering source 
lines to ensure that the desired instruction form is entered. If the quick form 
of the instruction is wanted, it must be specified. For example; 

005780 203C00000003 M07E.L #3,00 Assembles to the 6-byte instruction. 

whereas 

005780 7003 MOVEQ.L #3, DO Assembles to the 2-byte instruction. 

If the PC-relative addressing mode is desired, it must be specified. For 
example : 

001000 41F803F0 LEA $3F0rA0 Assembles $3F0 as an absolute address, 
whereas 

001000 41FAF3EE LEA $3F0(PC) ,A0 Assembles $3F0 as a PC-relative address. 

5.3.3.3 Current Locat ion . To reference a current location in an operand 
expression, the character "*" (asterisk) can be used. Examples are: 

007000 6022 BRA *+$24 

007000 6000FFFE BRA.L * 

007000 60FE BRA * 
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5.3.4 Assembler Output/Program Listings 



A listing of the program is obtained using the Memory Display (MD) command with 
the ;DI option. The MD coitinand requires both the starting address and the 
instruction count to be entered in the command line. 

Two techniques can be used to obtain a hard copy of the program using the MD 
coninand. 

a. The Printer Attach (PA) command is first used to activate the port 4 or 5 
printer. A Memory Display (MD) to the terminal will then cause a listing 
on the terminal and on the printer. 

b. An MD4 or MD5 (Memory Display to port 4 or 5) command using the ;DI 
option will cause a listing on the printer only. 



Figure 5-4 shows a listing of the sample program. Note in this example that $D 
lines are specified in the MD command. 

Note also that the listing does not correspond exactly to that of Figure 5-3. 
As discussed in paragraph 5.2.1.3, the disassembler displays in hexadecimal any 
number it interprets as an address; all other numbers are displayed in decimal. 



TENbug 
001000 
001004 
001006 
OOlOOA 
OOlOOC 
001012 
001014 
001018 
OOlOlA 
OOlOlC 
001020 
001022 
001028 



2.x > MD 1000 D;DI 
0C000030 

6D1C 

0C000039 

6E08 

02800000000F 

60FE 

0C000041 

6D08 

6E06 

04000007 

60EA 

203C000000FF 
4EF81012 



CMP.B 

BLT.S 

CMP.B 

BGT.S 

AND.L 

BRA.S 

CMP.B 

BLT.S 

BGT.S 

SUB.B 

BRA.S 

MOVE.L 

JMP 



#48, DO 

$001022 

#57,D0 

$001014 

#15rD0 

$001012 

#65,D0 

$001022 

$001022 

#7, DO 

$001000 

#255,D0 

$1012 



TENbug 



2.x > 



FIGURE 5-4. Sample Program Listing 
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5.3.5 Error Conditions and Messages 



There are five different conditions that can result in error messages while 
using the assertibler/disassesmbler. The response to the error condition can be to 
abort the command (and thus the assembler) , or to cause the assembler to ask for 
a corrected input line. The error conditions are discussed in the following 
paragraphs and include bus and address error traps, improper characters, numbers 
which are too large, and assembly errors. 



5.3.5.1 Error Traps . Two types of errors are trapped. One form, which 
produces a bus error trap, may be encountered if a location is accessed w]aere 
there is no memory. Included in this error type are write cycles to ROM. The 
second form produces an address error trap. Instructions must always begin on 
an even address; if not, an address error trap will result. Figure 5-5 shows 
examples of these conditions. 



TENbug 2.x > M AOOOOO;DI 

2700 0000768A 8008 1105 OOAOOOOO 0000 7682 0000 FFFF 0000 6100 0557 

1158 0000 OOAO 0008 0000 OOAO 0002 FFEl 0006 038F 4CD4 0100 0000 4CD4 0000 

BUS ERROR TRAP 

PC=0000768A SR=2700=.S7 USP=FFFFFFFF SSP=0000149A VBR=00000000 SFC=2 DFC=7 

DO-7 00A00044 01964D20 FFF24D20 00000008 0000B432 00000000 00000000 00000000 
AO-7 000016EA 00004EDA 000014D1 0000115C OOAOOOOO 00001158 00001158 0000149A 
PC=00768A E51C ROL.B #2,D4 

TENbug 2.x > MM FOOOOO;DI 

2700 000076E8 8008 0205 OOFOOOOO 0000 8C67 0000 1419 0000 1419 051A 

8C67 1280 0000 14DC 14D0 OOFO 0001 FFEl 0000 0380 1419 0000 0001 1280 0001 

BUS ERROR TRAP 

PC=000076E8 SR=2700=.S7 USP=FFFFFFFF SSP=0000149A VBRfOOOOOOOO SFC=2 DFC=7 

DO-7 671E8C67 00000001 00000253 00000000 OOOOOOIE OOOOOOIE 00000002 00000000 
AO-7 00001517 OOFOOOOO 000014D1 00001537 OOFOOOOO 0000153A 0000153A 0000149A 
PC=0076E8 B400 CMP.B D0,D2 

TENbug 2.x > M 10001;DI 

2700 0000768A 800C 1105 00010001 0000 7682 0000 FFFF 0000 6100 0557 

1158 0000 0001 0008 0001 0001 0003 FFEl 0006 038F 4CD4 0100 0000 4CD4 0000 

BUS ERROR TRAP 

PC=0000768A SR=:2700:s.S7 USP=FFFFFFFF SSP=0000149A VBR=:00000000 SFC=:2 DFC=7 

DO-7 00010044 01964D20 FFF24D20 00000008 0000B432 00000000 00000000 00000000 
AO-7 000016EA 00004EDA 000014D1 0000115C 00010001 00001158 00001158 0000149A 
PC=00768A E51C ROL.B #2,D4 



FIGURE 5-5. Examples of Error Traps 
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Also note that bus and address errors also cause display of the exception status 
from the stack, in hexadecimal characters. 

For details on this display, refer to the bus error and address error 
descriptions in the M68000 16/32-Bit Microprocessor Programmer's Reference 
Manual • 



5.3.5.2 Improper Character . If a character appears in the operand field that 
does not belong to the class of characters specified or expected, an "X" will be 
printed beneath the character string suspected of containing the improper 
character, followed by a "?" to prompt reentry of the line. For example, if a % 
(percent sign) is used to specify the binary class of characters, only the 
digits 0 and 1 will be accepted. 



TENbug 2.x > MM 6000 ;DI 
FFFF 



006000 
006000 



DC.W 
MOVE.W 



TENbug 2.x > MM 6000;DI 
FFFF 



006000 
006000 



DC.W 
ADDA.L 



S is not a decimal digit 



$FFFF ? 
#S' ,D0 
X? 



$FFFF ? 
#@974,A6 
X? 



MOVE.W #S' ,D0 



9 is not an octal digit 
ADDA.L #@974,A6 



TENbug 2.x > MM 6000;DI 
FFFF 



006000 
006000 



DC.W 

JMP 



P is not a decimal digit 



$FFFF ? 
$4000+PC 
X? 



JMP $40004-PC 



FIGURE 5-6. Exair^les of Improper Characters 



5-14 



5.3.5.3 Number Too Large . Another error type involves numbers which are too 
large for the MC68000 to handle. Again, an "X" is printed under the number 
suspected of containing the error, followed by a "?". Figure 5-7 gives an 
example. 



TENbug 2.x > MM 4000 ;DI Value is larger than 32 bits 

004000 FFFF DC.W $FFFF ? LEA.L $937402110 ,A7 

004000 LEA.L $937402110, A7 

X? 

FIGURE 5-7. Example of a Number Which Is Too Large 



5.3.5.4 Assembly Errors . An assembly error can occur due to an invalid opcode, 
an illegal addressing mode for a particular instruction, a format which is in 
error (leading space omitted as an example) , or a source line which is incorrect 
in some other way. When the entry as written is not a valid MC68000 
instruction, the assembler echoes the source line up to and including the field 
in which the error probably occurred. It also prints an "X" under the field 
suspected of containing an error, followed by a "?" to prompt reentry of the 
line. 

The entire line must be reentered in its correct form. If the error has not 
been corrected or another is encountered, the error indicator will be returned. 
After all errors have been corrected and the source line represents a valid 
MC68000 instruction, the line will be assembled. The memory address, machine 
code, and source code will be displayed and the next line will be disassembled. 
A period (.) is used to exit the conmand. Examples of typical errors are shown 
in Figure 5-8. 



5-15 



Example 1 
006700 



Invalid Opcode 



FFFF 



006700 6752 



DC.W 
BEQU.S 

X? BEQ.S $6754 
BEQ.S $6754 



$FFFF ? BEQU.S $6754 



Example 2 Missing Leading Space 

001100 FFFF DC.W $FFFF 



001100 8B16 



X? OR.B D5y(A6) 
OR.B D5,(A6) 



?OR.B 



D5y(A6) 



Example 3 
005300 



unrecognizable Opcode 



FFFF 



DC.W 

MULSW 

X? MULS.W 



$FFFF ? MULSW 



52, D3 



005300 C7F80034 MULS.W 52,D3 



52, D3 



Example 4 Invalid Size Extension 

007200 FFFF DC.W $FFFF ? 

MOVEQ.B #2,D1 

X? 

007200 7202 MOVEQ.L #2,D1 

Exanple 5 Invalid Addressing Mode 
001500 FFFF 



001500 5E10 



DC.W 
ADDQ.B 

ADDQ.B 



$FFFF ? 
#7, AO 

X? 

#7, (AO) 



MOVEQ.B #2rDl 
MOVEQ.L #2,D1 



ADDQ.B #7, AO 
ADDQ.B #7r(A0) 



Examples 6 and 7 Branch Address Too Large 



DC.W 
BRA 



004900 FFFF 
004900 600036FE BRA 



$FFFF ? 
$10000 

X? BRA 

$8000 



BRA $10000 
$8000 



004800 FFFF 



004800 605E 



DC.W 
BRA.S 

BRA.S 

BRA.S 



$FFFF ? 
$7000 



$4902 
$4860 



BRA.S 



$7000 



X? BRA.S 



$4902 



X? BRA.S 



$4860 



FIGURE 5-8. Examples of Assenbly Errors 
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CHAPTER 6 

TENbug ROUTINES AVAILABLE TO THE USER 



6.1 INTRODUCTION 

This chapter c3escribes the TENbug TRAP #15 I/O handler, which allows system 
calls fran user programs. The system calls can be used to access selected 
functional routines contained within the TENbug firmware, including input and 
output routines. TRAP #15 may also be used to transfer control to TENbug 
without performing initialization. 

6.2 USER I/O THROUGH TRAP #15 

Format in user program: 

TRAP #15 Call to TENbug tr^ handler 

DC.W $000x Function being requested (x = function) 

Valid Functions (refer to paragraph 4.2.26 for port nuitber definitions) : 



FUNCTION DESTINATION 



DESCRIPTION 



0 TENbug 

1 Console (port 1) 



Display format (see DF) ; then go to TENbug. 
Input line 

Input parameters: Point A5.L and A6.L both to 
the start of buffer. 

Exit conditions: A5.L points to the start of 
buffer; A6.L points to the 
end + 1. 



Console (port 1) 



Host (port 2) 



Host (port 2) 



Printer (port 4) 



Console (port 1) 



Output line (with CR, LF) 

Input parameters: Point A5.L to start of 
string and A6.L to end of 
string + 1. 

Exit conditions: None. 

Read line (no echo) 

Input parameters: Same as Function 1. 

Exit conditions: Same as Function 1. 

Output line (with CR, LF) 

Irput parameters: Same as Function 2. 

Output line (with CR, LF) 

Input parameters: Same as Function 2. 

Exit conditions: Same as Function 2. 

Output line (no CR, LF) 

Input parameters: Same as Function 2. 

Exit conditions: Same as Function 2. 
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Host (port 2) 



Output line (no CR^ LF) 

Input parameters: Same as Function 2, 

Exit conditions: Same as Function 2. 



Printer (port 4) 



Print line (no CR, LP) 

Input parameters: Same as Function 2. 

Exit conditions: Same as Function 2, 



Host (port 3) 



Read line (no echo) 

Input parameters: Same as Function 1. 
Exit conditions: Same as Function 1. 



Host (port 3) 



Output line (with CR, LF) 

Input parameters: Same as Function 2. 

Exit conditions: Same as Function 2. 



B 



Host (port 3) 



Output line (no CF, LF) 

Input parameters: Same as Function 2, 

Exit conditions: Same as Function 2. 



Printer (port 5) 



Print line (with CR, LF) 

Input parameters: Same as Function 2. 

Exit conditions: Same as Function 2. 



D 



Printer (port 5) 



Print line (no CF, LF) 

Input parameters: Same as Function 2. 

Exit conditions: Same as Function 2. 



EXAMPLE PROGRAM: 



00002000 
002000 2E7C00004000 
002006 2A7C0000201C 
00200C 2C4D 



* 
* 

START 



TEST OF TRAP #15 USER I/O 



ORG $2000 
MOVE.L #$4000,A7 
MOVE.L #BUFFER,A5 
MCVE.L A5rA6 



PROGRAM STARTS HERE 

INITIALIZE STACK 

FIX UP A5 & A6 for I/O 



00200E 4E4F 
002010 0001 



TRAP #15 
DC.W 1 



INPUT BUFFER FROM (CONSOLE 



002012 4E4F 
002014 0002 



TRAP #15 
DC.W 2 



PRINT BUFFER TO CONSOLE 



002016 4E4F 
002018 0000 
00201A 60E4 



TRAP #15 
DC.W 0 



STOP HERE LIKE BREAKPOINT 



00201C 0200 



BUFFER DS.L 128 



THIS IS THE I/O BUFFER 
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6.3 TENbug SUBROUTINES 

A branch table is located at the beginning of ROM to allow use of TENbug 
subroutines under various operating systems. Note, however, that TR^P #15 
support is the standard interface between the user and I/O routines. Use of the 
branch table should be based upon a complete understanding of the TENbug 2.x 
source release. 

The branch table allows a calling routine to access any of the supported 
subroutines with a BSR to a long branch located at the start of EPROM. The user 
will always be able to access these subrouties despite future changes in their 
locations because the table offset will not change (even though the actual 
subroutine addresses might) • 

In most cases, the following subroutines can be entered with a BSR to the 
address shown for each entry. 

$FOOOOC TRACE - Trace one instruction 

No registers are required for linkage except the stack for the RTS. 



$F00010 BOCMD - Disk boot entry point 

No registers are required for linkage; control is returned to TENbug. 



$F00014 ABORTB - Software abort routine 

No registers are required for linkage; control is returned to TENbug. 



$F00018 CHKBP - Illegal instruction vector 

No registers are required for linkage; control is returned to TENbug. 



$F0001C CHECKSUM - Calculate or verify checksum 

AO Start of memory 

Al End of memory 

CCR Condition code returned: 

Z (BEQ) Indicates valid checksum 



$F00020 DISKR - Disk read routine 



AO Address of hardware (controller/drive) 

DO Number of 256-byte blocks 

Dl Winchester byte 5 

D2 Memory address 

D3 Block address 

IPCNUM RAM variable containing 1-byte controller number 

DRVNUM RAM variable containing 1-byte drive number 
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$F00024 DISKW - Disk write routine 



AO Mdress of hardware (controller/drive) 

DO Number of 256-byte blocks 

Dl Winchester byte 5 

D2 Msnory address 

D3 Block address 

IPCNUM RAM variable containing 1-byte controller number 

DRVNUM RAM variable containing 1-byte drive number 



$F00028 INITVECT - Initialize miscellaneous vectors (#4-#ll and #24-#48) 
$F0002C INITHRAM - Initialize specific vectors (bus and address error) 
$F00030 INCHS - Input a character from the keyboard 



DO Converted value for key pressed 

OCR Condition codes returned: 

Z (BEQ) Character is displayable 

X (BMI) BREAK entered 

C (BCS) Character is not displayable (i.e., $0-$lF, $80-$FE) 



$F00034 OUTCHS - Output a character to the display 
DO must contain the character to be output. 



$F00038 POINTRAM - Get RAM pointer 

AO will contain the address of the following RAM variables: 

DS.L 1 Starting address of RAM 

DS.L 1 Ending address of RAM 

DS.L 1 Address of the disk configuration table 

DS.L 1 Address of the disk controller/drive variable 



$F0003C N/A - Reserved for future use 



$F00040 HOTSTART - User request to restart TENbug 

No registers are required for linkage; control is returned to TENbug, 



$F00044 N/A - Reserved for future use 



$F00048 N/A - Reserved for future use 
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APPEISDIX A 



SOFTWARE ABORT 



If a target program must be stopped with the stack data preserved ^ the user may 
press the ABORT pushbutton on the VME/10 chassis operator panel. This will 
generate a level seven interrupt vector which will interrupt the target program 
and load the contents of RCM location $138 into the program counter. If the 
default vector locations have not been overwritten, the console will display 
SOFTWARE ABORT and the following data will be saved: address registers, data 
registers, program counter, status register, supervisor stack pointer, user 
stack pointer, vector base register, destination function code, and source 
function code. 

Remember that TENbug shares resources with the target program under test (refer 
to paragraph 1.3.2). Therefore, if the target program changes the contents of 
location $138, this abort feature is lost. 

In contrast to the abort feature, the contents of the target supervisor stack 
pointer, program counter, and status register are lost when the RESET pushbutton 
is pressed. The RESET feature sets the processor to supervisor state, loads the 
supervisor stack pointer with the contents of RAM locations 0-$3, and loads the 
program counter with the contents of RAM locations $4-$7. It also saves the 
contents of the target registers for display by the Display Format (DF) command. 
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CHAPTER 1 



GENERAL INFORMATION 



1.1 INTE«0DOCriON 

This manual describes the debuggii^ monitor TENbug as it is used in the VME/10 
MicrocGnputer System r hereafter referred to as the VMEAO. 



1.2 DEFINITION OF TENbug 

TENbug is the resident fimiMare debugging package for the VME/IO. The 32K-byte 
firmware (stored in ROM or EPROM devices) provides a self-contained programming 
and operating environnent* TENbug interacts with the user through predefined 
commands that are entered via the teminal. Ihe cGmnands fall into five general 
categories: 

a. Oommands which allow the user to display or modify memory. 

b. Oommands Which allow the user to display or modify the various internal 
registers of the MC68010. 

c* Cannands which allow the user to execute a program under various levels 
of control. 

d. Oonmands which control access to the various input/output resources on 
the board. 

e. Conmands which allow the user to select and test video features and 
gr^hics resolution. 



An additional function called the TRAP #15 I/O handler allows the user program 
to utilize various routines within TENbug. The TRAP #15 handler is discussed in 
Chapter 6. 

Ihe operational mode of TENbug is described in Chapter 2. 



1.3 TENbug INTERNAL STRUCTURE 
1.3.1 Memory Mag 

The following abbreviated mennory for the VMEAO highlights addresses that 
might be of particular interest to TENbug users. Refer to the VME/10 
Microcomputer System Reference Manual for a caaplete description of the memory 
maps for both high- and low-resolution graphics modes. 

Note that addresses are assumed to be hexadecimal throughout this manual. In 
text, nunobers may be preceded with a dollar sign ($) for identification as 
hexadecimal. 
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RAM LOCATION 



FUNCTION 



0-3FP 
400-AFF 



Vsctors 

Work area and stack for TENbug 



SPECIAL LOCATIONS FUNCTION 



F0O0OO-F00O07 



Area containing initial values for supervisor stack 
pointer, program counter, and vector base register after 
cold start 



F14000-F14FFF 



Area used to define progranmable "soft" character set 



I/O LOCATION FUNCTION 

F1C1C9 Serial port 2 (host) , serial I/O card (optional) 

FICICB Serial port 3 (host) , serial I/O card (qotional) 

FICIEI Parallel port 1 (printer) , parallel I/O card (optional) 

F1C1E9 Parallel port 2 (printer) , parallel I/O card (optional) 

FlCODl Base address of I99IN1 Disk Controller 



1.3.2 Vectors and Errors 

TENbug shares resources with the target program under test — that is, each 
affected resource can be used only by TElftxig or the target program at any given 
time. 

Exertion vectors are memory locations fran vihich the processor fetches the 
address of a routine which will handle the exception. These vectors are 
initialized by TENbug in default menory locations 0 through $3FF during a cold- 
er warm-start sequence (see Chapter 2) . If the target program uses any of these 
locations, the user values must be rewritten following each cold or warm start. 
If the target prog^ram uses ax^ of the following locations, the associated 
function will be lost to TENbug. 



MEMORY LOCATION TENbug FUNCTION 

10-13 Breakpoints (illegal instructions) 

24-27 Trace 

BC-BF TRAP #15 user calls to TENbug 

138-13B ABORT pushbutton switdi on VMEAO operator panel 

(refer to Appendix A) 

When uninitialized vectors are given control because of exception processing, 
the console terminal will display a general message indicating the vector offset 
that was used: Offset Vector $xxx Error Trap. In addition, several of the 
vectors cause display of apprc^riate information. (Refer to Appendix B for a 
list of error messages.) BUS and ADDR error traps also cause display of the 
exertion status from the stack, in hexadecimal characters, as shown in the 
following exan^le. 
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status Register 

Program Counter Mdress 

Frame Format and Vector Offset 
^ Special Status Word 
Fault Address 



2709 00F6533A 8008 1305 00FiC030 0000 0020 0000 20FF OOFO 2007 067A 

5338 0000 OOFl 2007 C030 OOFO 533C FFEl 0000 0394 1E14 0000 0004 1E14 0003 



BUS ERROR TRAP 



For additional infonnation on this display, refer to the bus error, address 
error, and the reference classification descriptions in the exception processing 
chapter of the M68000 16/32-^it Microprocessor Programooer's {Reference Manual. 



1.3.2.1 Resetting Vector Base Register * The MC68010 processor i:^n v^ich the 
VMVIO is based features a Vector Base Register (VBR) v^idi contains the base 
(starting) address for the VME/IO exertion vectors. Exertion vectors are 
located in memory addresses 0 through $3FF relative to the VBR. Upon reset 
(cold or warm start) of the m::68010, the value of the VBR is set to zero. 

TENbug must have control of the exertion vectors to function properly. If the 
user sets the VBR to a value other than its default value of zero, he must also 
establish a new set of exception vector memory locations for the VBR value. In 
other words, the user must cc^y all existing vector memory locations to the same 
relative location in the new VBR table. 

In the following example, the VBR value is changed fron 0 to lOFOO. Exception 
vector memory locations must also be copied to this new location. Note that the 
content of each vector memory location (i.e., the appropriate routine address) 
remains the same. 



VBR 



VBR a lOFOO 



00000444 



0000044C 



00000454 



lOFOO 
10F04 
10F08 
lOFOC 



00000444 



0000044C 



00000454 



/ 
/ 



/ 
/ 



/ 
/ 



/ 
/ 



3PG 



112FC 



000008A4 



000008A4 
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1.3.3 Disk I/O 

TEMbug provides limited support of disk I/O through a Winchester Disk 
Controller. Ttm commands supported are BH, BO, IOC, lOP, and lOT. BH, BO, and 
optionally, lOT read the volume ID found in sector 0 of each disk. Pointers to 
the configuration data located in sector 0. are used to read the configuration 
sector. Ohe configuration sector contains tiie data that allows the FWINl 
controller to issue reads to the specific types of drives. 



NOTE 

A sector is 256 bytes. The disk controller maps 
physical sectors on various disks into virtual 
256-byte sectors at the controller interface. 



If a disk read to a Winchester drive fails, the read will be retried twice 
before generating an error message. The FWINl controller will make corrections, 
if possible, and the disk transfer will continue on from the next sector. 



NOTE 

ERROR CORRECTION and RETRY were first provided in TENbug 2.1. 



Hhe first 256 bytes of the media are the volume ID. Bytes $F8-$FF of the volume 
ID must contain either the ASCII character string "EX(»MACS" or "MOTOROLA"; 
otherwise, an error message will result. For more information on interpreting 
the data displayed, see the Winchester Disk Controller User's Manual. 

The other information used from the volume ID is: 



BYTES 


USED FOR 


$14-$17 


Starting sector address of program to be loaded (via BH, BO) . 


$18-$19 


Number of 256-byte sectors to be loaded. 




Load address (first destination memory byte) . 


$90-$93 


Sector address of media configuration parameters (refer to 




Appendix C) . 


$94 


Length of configuration area (usually one 256-byte sector) . 



1.4 TENbug WITH SYSTEM V/68 

The following paragraphs list information specific to the use of TENbug with 
SYSTEM V/68. 
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1.4.1 Operational Commancis 

In the following list, caximands given in parentheses indicate the key that is to 
be pressed* Commands not given in parentheses are to be typed as shown. 



BH ' Boots the operating system from the fixed disk and halts. 

BO Boots the operating system frcxn the fixed disk and gives 
control to the program loaded. 

(BREMC) Aborts coxsnand. 

(DEL) Deletes character. 

(CTRL-D) Redisplays line. 

(CTRL-H) Deletes character. 

(CTRL-W) Suspends output; any character continues output. 

(CTRL-X) Cancels cannand line. 



1.4.2 Debugging Cannands 

The following connroands may be useful for ddsugging, but should be used only in 
single-user node after sync has executed. Use of these ccnntands may result in 
the need for system reboot. 



.A0-.A7 


BARS, NQBARS * 


HE 


.D6-.D7 


BF 


IOC 


.DEC 


BM 


lOP 


.PC 


BR, NOBR 


lOT 


.R0-.R6 


BS 


MD 


•SFC 


CH, NOCH 


MM 


•SR 


CRT 


MS 


.SSP 


CS 


oe 


.USP 


DC 


PA, 


.VBR 


DF 


TR 




GD 


TT 




GO 






GR, NOGR 






or 





This ccnnRiand modifies graphics menory and should be used only with an 
operating system configured to support graphics. 
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1.4 .3 Ndn-Applicable Ooninaids 



The following commands should be used in a stand-alone mode; they should not be 
used with SYSTiM V/68. 



1.5 REFERENCE MANUALS 

Refer to the following documents for more infozmation on the environments in 
which TENbug is used. 

VME/10 Microcomputer System Overview Manual , M68KVS0M 

VME/10 Microconaputer Systen Diagnostics Manual > M68KVSDM 

VM^IO Microconputer System Reference Manual, M68KVSREF 

VERSAdos to VME Hardware and Software Oonfiguration User's Manual, MVMEDOS 

Winchester Disk Controller user's Manual, M68RWIN1 

!9;mE400 Dual RS-232C Serial Port Module User's Manual, MVME400 

MVME410 Dual 16-Bit Parallel Port Module user's Manual, MVME410 

M68000 16/32-Bit Microprocessor Programmer's Reference Manual, M68000UM 



BI 

BT 
DU 
LO 



PP 

m 

VE 
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EXAMPLE 

TEtJbug 2.x > .R4 4000 

TENbug 2.x > BR 1010 2000; 5 2040 4000 

BREAKFOIHTS 
001010 001010 
002000 002000; 5 
002040 002040 
000Q00H-R4 004000 

TENbug 2.x > NOBR 1010 2040 

BREAKFOIin'S 
002000 002000;5 
000000+R4 004000 

TENbug 2.x > NOBR 

BREAKPOINTS 

TENbug 2.x > 



4* 2*9 Block of Memory Search (BS) BS 

BS <addressl> <address2> •<literal string>» 

BS <addressl> <address2) <data> [<mask>] [l<options>] 



Hie BS canmand has two modes: literal string search and hex data search. Both 
modes can seardi memory beginning at <addressl> through <address2>r looking for 
a match. Alternatively, a user can specify that a data search report back only 
locations that do not match the input data. Hiis alternative search for a 
mismatch can be particularly useful when searching for suspected faulty mennory. 
For exan^le, a known pattern can be placed into suspect RAM locations, and a BS 
canmand with an option to seardi for a mismatch will display any bad RAM 
locations. 

The literal string mode is initiated if a single quote (*) follows <address2>. 
The ASCII literal string may contain both uppercase and lowercase letters. If a 
single quote does not follow <address2>, data search mode is assumed. If the 
optional mask is supplied with a data search, the mask is ANDed to the data 
found at eac^ address. The data located in the memory is not changed. Hie 
masked data is then examined for a match. (Hie default mask is all I's.) 

Available options for a data search enable a user to specify the data format and 
whether to search for a match or a mismatch. The options to specify data format 
are the letters B, W, and L. To specify a mismatch, a minus sign is placed 
before or cifter the data format indicator. If there is no minus sign in the 
options field, a matching search is assumed. 

;B Data format is a byte; seardi for a match. 

Data format is a byte; seardi for a mismatch. 
;W Data format is a word; seardi for a match. 

;-W Data format is a word; search for a mismatch. 
;L Data format is a longword; search for a match. 

;-L Data format is a longword; search for a mismatch. 

The default value for a data seardi is ;B. 



When a search is ccmpleted, each address containing data that meets the 
specified requirements is displayed on the terminal, along with the data located 
at that address. 

To illustrate the searching connand, the following examples are provided: 
EXAMPLE COtWEm 



TENbug 2.x > MD 10000 40 
010000 A5 5A A5 5A A5 5A A5 5A 
010010 41 61 20 41 42 61 62 20 
010020 A55AA55AA55AA55A 
010030 A5 5A A5 5A A5 5A A5 52 

TEMbug 2.x > BS 10000 10040 'ab* 
Physical A:3dresss00010000 00010040 

010015 'ab' 

OlOOlB *ab* 



Show memory to be searched. 

A5 5A A5 5A A5 5A A5 5A %Z%Z%Z%Z%Z%Z%Z%Z 

41 42 43 61 62 63 20 20 Aa ABab ABCabc 

A5 5A A5 5A A5 5A A5 5A %Z%Z%Z%Z%Z%Z%Z%Z 

A5 52 A5 52 A5 5A A5 5A %Z%Z%Z%R%R%R%Z%Z 

Successful' seardi for literal string 
•ab*. 
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TEMbug 2.x > BS 10000 10040 43 DF;B 
Physical Mdress^OOOlOOOO 00010040 
OlOOlA 43 - 
OlOOlD 64 

TENbug 2.x > BS 10020 10040 A55A;-W 
E^ysical Mdress»00010020 00010040 
010036 A552 
010038 A552 
01003A A552 



Successful data search using a 
mask allowing both lowercase and 
uppercase ASCII C. 



Search for any words NOT matching 
the test pattern. 
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4.2.10 Block of Manory Test (BT) 



BT 



BT <addressl> <address2> 



The BT cccmnand provides a destructive test of a block of meniory* A word 
boundary (even address) must be given for the starting <addressl> and ending 
<address2> of the block. If the test runs to completion without detecting an 
error, all memory tested will have been set to zeros. 

Execution of this connand may take several seconds for large blocks of memory. 

When a problem is found in a memory location, the address, the data stored, and 
the data read are displayed. Control is then returned to lENbug. 



See also: BI 



EXAMPLE 

TENbug 2.x > BT 44000 47FFE 
PHYSICAL ADDRESSs00044000 00047FFE 



COMMENT 

Successful menory test; no errors 
found. 



TEMbug 2.x > BT 44000 4FEFE Dhsuccessful memory test; error 

PHYSICAL ADORESSs00044000 0004FFFE data is listed. 

FAILED AT 0480FE WROTE=FFFF REAI>0000 

TENbug 2.x > 
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EXAMPLE 



CX3MMENT 



TEdbug 2.x > lOP 

READ OR WRITE ...R ? (^) 

MEMORY ADDRESS FOR DISk I/0». $00000000 ? 1000 

DRIVE NUMBER (0&l«FIXED,2&3=FLOPPy)» $00 ? 

MEMORY ADDRESS FOR DISK I/0«. $00001000 ? AOO 
DRIVE NUMBER (0&1»FIXED,2&3"FLOPPY)».......$00 ? 2 

CONTROLLER NUMBER* $00 ? (CR) 

FIRST BLOCK NUMBER* ,$00000000 ? 500 
NUMBER CP (256 BYTE) BLOCKS^ $0000 ? 1 

ARE YOU SURE? (Y/N) ? Y 

"R" COMPLETE 



Request physical disk I/O to read a routine. 

Use default of read. 

Change $0 default to $1000. 

itiat isn't correct; back up one parameter. 

Change $1000 to $A00. 

Change default drive 0 to drive 2. 

Use controller 0. 

Change block number to $500. 

Read one 256~byte block. 

Last change? Yes, all is ready. 

Ihe read is connplete. 



TENbug 2.x > M3 AOO 30 

OOAOO 41 F8 10 00 20 3C 00 00 02 FF 11 00 51 C8 FF 

OOOAIO 60 EE 4E 71 4E 71 4E 71 4E 71 4E 71 4B 71 4E 

000A20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 



Display data read from disk (only first $30 bytes) 

EC Ax.. ^......(^.S 

71 'nNqNgNgNgNgNgNq 
00 



TENbug 2.x > M A12;L 



Make change to RAM where routine vias locK3ed. 



000A12 
000A16 
OOOAIA 
OOOAIE 
000A22 



4E714E71 ? 
4E714E71 ? :± 
4E714E71 ? 
4E710000 ? ^ 
00000000 ? . 



TENbug 2.x > lOP 

READ OR WRITE (E^W)* R ? W 

MEMORY ADDRESS FOR DISK I/O=.$00000A00 ? (CR) 

DRIVE NUMBER (0&l=FIXED,2&3=FLOPPy) = $02 ? (^) 

CONTROLLER NUMBER* $00 ? (^) 

FIRST BLOCK NUMBER*. $00000500 ? (CR) 

NUMBER OF (256 BYTE) BLOCKS* $0001 ? 0) 

ARE YOU SURE (Y/N) ? Y 

•W COMPLETE 



Request physical disk I/O to write to a disk. 

Change to W for write. 

Use previous address. 

Drive is fine; no change. 

No change. 

No change. 

No diange. 

Last chance; are you sure? Yes, all is ready. 
Write is complete. 



TENbug 2.x > 



4.2«24 I/O Teach for a Disk (lOT) lOT 
lOT [<device>] [<controller>] 

where: 

device Is a single hexadecimal digit, 0 through 3/ specifying the 

disk to be read* Default value is 0* 

controller Is a single hexadecimal digit, 0 or 1, specifying the MINI 
controller through v^ich the disk is connected. Default value 
is 0. 

The lOT connmand allows the user to change the configuration of the FWINl 
controller. If the lOT canroand is invoked without specifying <device> or 
<controller>, the coRinand will prompt for required information. If the <device> 
awVor <controller> are specified in the lOT conmiand line, the current 
configuration is overwritten with the configuration data located on the disk, 
without the user having to know and manually enter the parameter information 
required. The parameters required for correct configuration v^en the options 
are not specified depend upon the type of drive, as shown below: 

WINCHESTER HMD DISK 5.25-INCH FLOPPY DISK 

Drive number Drive number 

Controller number Controller number 

Sector size Sector size 

Number of heads Ntsiiber of heads 

Number of cylinders Number of cylinders 

Number of sectors per track Number of sectors per track 

Motorola/IBM format 
Single- or double-sided media 
Single- or double- track density 
Single- or double^ata density 

The lOT conmand will present the appropriate questions based upon which drive 
has been specified. Ihere are four actions that can be taken following a 
question mark pronpt: 

? (CR) - Entering a carriage return indicates that the existing value for 
the current parameter is acceptable; go on to the next 
parameter. 

? ^ . Ehtering a period indicates that this execution of the ICC 

camnand must be terminated now, without asking for more 
pEurameters. 

? - Entering a caret symbol indicates that a previous parameter 

requires a diange and will logically back up one parameter each 
time it is entered (until the first entry is reached, where it 
will remain until one of the other responses is received) . 

? <data> - Entering the appropriate data requested (followed by a carriage 
return or ENTER) • Often the parameters are checked for valid 
options (i.e, Yor N). 

Appropriate configuration information for specific disk types is listed in the 
"Mass Storage" chapter of the VERSAdos to VME Hardware and Software 
Configuration User's Manual. 
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EXAMPLE 



TEMbug 2.x > lOT 

DRIVE NUMBER (0&l»FIXBD,2&3='FLOPPy)» 
OONTROLLER NUM^R» 
SECTOR SIZE (0»128, 1^256, 2-512, 3-1024) » 



TENbug 2.x > lOT 

DRIVE NUMBER (0&l»FIXQ>,2&3»FLQPPy)» 
CX)NTROLLER NUMBEI^" 
SECTOR SIZE (0=128,1=256,2-512,3-1024)= 
NUMBER Oe HEADS, (ON THIS DRIVE)" 
NUMBER OF CYLINDERS, (ON THIS DRIVE)* 

SECTORS PER TRACK* 
MOTOROLA/IBM FORMAT (H/I)* 
SINGLE/DOUBLE SIDED MEDIA (S/D)» 
SINGLEA)OUBLE TRACK DENSITY (SA>) = 
SINGLE/DOUBLE DATA DENSITY (S/D) = 



TEMbug 2.x > lOT 

DRIVE NUMBER (0&1=FIXED,2&3=FLOPPY) = 
CONTROLLER NUMBEI^» 
SBCnX)R SIZE (0=128,1=256,2-512,3-1024)* 
NUMBER OF HEADS, (ON THIS DRIVE)* 
NUMBER OF CYLINDERS, (ON THIS DRIVE)* 

SECTORS PER TRACK* 



TENbug 2.x > lOT 0 

DRIVE NUMBER (0&l=FIXED,2&3*FLOPPY)* 
CONTROLLER NUMBER* 
SECTOR SIZE (0*128,1=256,2-512,3-1024)= 
NUMBER OF HEADS, (ON THIS DRIVE)* 
NUMBER OF CYLINDERS, (ON THIS DRIVE)* 

SECTORS PER TRACK* 



lOT 



COMMENT 

Teach SWINl controller a new configuration* 
,$02 ? 00 Select drive 0. 

>$00 ? (OR) Use default controller 0. • 
...1 ? • Change of heart start over again. 



Invoke the lOT coninand again. 

»..$00 ? 02 Configure drive 2 (first floppy). 

>..$00 ? (OR) No change. 

1 ? (CR) No change. 

...$02 ? (^) No change. 

,$0050 ? (^) No change. 

...$10 ? 8 Change from 16 sectors/track to 8. 

I ? (CR) No change. 

»....D ? (CR ) No change. 

.....D ? (CR) No change. 

,....D ? S Change to single-data density. 



lOT connroand showing default parameters 
.$00 ? for hard disk #0. TEMaug initializes 

.$00 ? the BNINl. No parameters were entered 

...1 ? from the menu. 



...$01 ? 
.$0001 ? 
...$00 ? 



lOT ccninand requesting the configuration 
..$00 ? data from the disk and initializing the 

..$00 ? IWINl. No parameters were entered from 

••••1 ? the menu. 

..$06 ? 
$0132 ? 
..$20 ? 



TEMbug 2.x > lOT 



DRIVE NUMBER (0&1"FIXED,2&3»FL0PPY)» 
CX)NTROLLER NUMBER? 
SECTOR SIZE (0«128 , 1»256, 2»512, 3=1024) = 
NUMBER Oe HEADS, (ON THIS DRIVE) » 
NUMBER OP CYLINDERS, (ON THIS DRIVE) » 
NUMBER OP HEADS, (ON THIS DRIVE) » 
NUMBER OP CYLINDERS, (ON THIS DRIVE) » 

SECTORS PER TRACK" 



TBNbug 2.x > 



lOT 



Invoke lOT to change configuration of hard disk to 
allow use as a Snniegabyte hard disk. 



Oops, passed the nunober of he£K3s parameter; back up. 
Change to 2 heads. 
Change to $132 cylinders. 
And $20 (32) sectors/track. 



NOTE: Hiese parameters are specifically for the 
SHKiegabyte Winchester hard disk. To find out 
what a particular Winchester hard disk 
requires for configuration, boot the operating 
system and, ^ile "inactive" (not updating 
critical files) , press the ABORT button. Hien 
enter an lOT comnand to see how the boot 
device is configured. If all is well, enter 
GO and continue with operating system control. 



LO 



TENbug 2«x > LO ;XaDO AOO A80 Qiter Load cannand specifying ;X option 

(echo S-records to CRT as memory is being 
loaded) • 

DU AOO A80 

PHYSICAL ADDRESS»OOOOOAOO 00000A80 Notice SO, SI, and S9 records are displayed 

upon scre^. (Refer to warning in cannand 
description about timing restrictions with 
the ;X option.) 

S0030000FC 

S1130A00000102030405FFFF08090A0B0C0D0E0F79 

S1130A10101112131415161718191A1B1C1D1E1F5A 

S1130A20202122232425262728292A2B2C2D2E2F4A 

S1130A30303132333435363738393A3B3C3D3E3P3A 

S1130A40404142434445464748494A4B4C4D4E4F2A 

S1130A50505152535455565758595A5B5C5D5E5FU 

S1130A60606162636465666768696A6B6C6D6E6F0A 

S1130A70707172737475767778797A7B7C7D7E7FFA 

S1040A808QE'l 

S90300000FC 



TEClbug 2.x > W AOO 80 Display memory containing downloaded data. 



OOOAOO 


00 


01 


02 03 


04 


05 FF FF 


08 


09 


OA 


OB 


OC 


OD OE 


OF 




OOOAIO 


10 


11 


12 


13 


14 


15 


16 


17 


18 


19 lA 


IB 


IC 


ID IE 


IF 




000A20 


20 


21 


22 


23 


24 


25 


26 


27 


28 


29 


2A 


28 


2C 


2D 2E 


2F 


!"#S%& •()*+,-./ 


000A30 


30 


31 


32 


33 


34 


35 


36 


37 


38 


39 


3A 


3B 


3C 


3D 3E 


3F 


0123456789: ;<=>? 


000A40 


40 


41 


42 


43 


44 


45 


46 


47 


48 


49 


4A 


4B 


4C 


^ 4E 


4F 


SABCDEFOilJKLMNO 


000A50 


50 


51 


52 


53 


54 


55 


56 


57 


58 


59 


5A 


5B 


5C 


5D 5E 


5F 


PQRSTCIVWXyZ[\]*_ 


00QA60 


60 


61 


62 


63 


64 


65 


66 


67 


68 


69 


6A 


6B 


6C 


6D 6E 


6F 


' abcdef ghi j klmno 


000A70 


70 


71 


72 


73 


74 


75 


76 


77 


78 79 


7A 


7B 


7C 7D 7E 


7F 


pqrstuvwxyz{| }". 



NOTE 



The host system used to create and transmit the S-records 
was an m::68000 Educational Computer Board (MEX68KBCB) • 
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4.2.26 Memory Display (MD) 

MD[<port nutnber>] <address> (<count>] [;<options>] 



MD 



The MD command displays a portion of manory v^ich begins at <address> and 
extends for the number of bytes or lines given as <count>. There are two 
formats that can be requested with the MD connand. 

a. Hie duR^ format begins each line with the starting or next hexadecimal 
memory address followed by 16 hex bytes per line with the ASCII 
equivalent shown to the right. Hie number of lines varies with the 
<count> entered (or default) . There are no partial lines. If the byte 
count ends in the middle of a line, the ccmplete line is displayed. 
(Default byte <count> is $10.) 

b. The disassembler format provides: 

1. Ihe starting or next hexadecimal memory address. 

2. The object code displayed in hexadecimal. 

3. The M68010 source statement that will assemble into the object code 
as described in 2. above. 

If the operation code is not valid, a "Define Gonstant" is constructed 
for one wozd. Notice that <count> for the disassembler mode is a number 
of source lines to be disassembled and displayed, not the number of 
bytes. (Default line <count> is $10.) 

Default destination is the console terminal. ^)ecifying MD<port number> allows 
the output to be directed to another port. 

Valid port nundbers for this command are: 

PORT NUMBER DESCRIPTION 



none Defaults to TENbug port 1 (VMEAO built-in terminal/keyboard) • 

1 Specifies TENbug port 1 (VME/10 built-in terminal Aeyhoard) • 

2 Specifies TENbug port 2 (MVME400 port 2 - 720VB) . 

3 Specifies TENbug port 3 (MVME400 port 1 - 7201/A) . 

4 Specifies TENbug port 4 (MVME410 port 1 - PIVA) . 

5 S^if ies TENbug port 5 (MVME410 port 2 - PIA/B) . 

Options s\:pported are the disassendaler and the screen option. 

;DI Requests the disassenobler option. The <count>, if provided, is a 

line count (default is $10) . 

;S Requests the display of a full screen of memory (16 lines of 



display in either dump or disassenibler format) • Notice that the 
default for disassembly is $10 (or 16 decimal) anyway. If the 
<count> and- ;S option are both entered within the same MD command, 
the ;S option has priority. 

All cGRibinations are valid (e.g., ;DIS, ;SDI, ;S DI, ;DI S) . 
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4.3 00MM2^ SUMM2VRY 

Hie ccmiiards anci options available to TEtJbug 2.x users are summarized in Table 4-2. 

TAB££ 4-2. TEtflxig Conmand and Option Sumnnary 



CX3MMAND 



DESCRIPTION 



[NO] BARS 

BF <addressl> <address2> <pattern> 

BH [<device>] [,<controller>] 

BI <addressl> <address2> 

BM <addressl> <address2> <address3> 

BO [<device>] [,<controller>] [,<string>] 

[NO] BR [ <address> [ ; <count> ] ] • • . 

BS <addressl> <address2> *<literal string>* 

<addressl> <address2> <data>[<roask>] (;<option>] 

BT <addressl> <address2> 

(NO]CH (<bits>] 

CRT 

CS [<addressl>] [<address2>] 

DC <expression> 

DF 

DU[<port number>] <addressl> <address2> [<text>] 
GD [<address>] 



Draw graphics test pattern. 

Bloclc fill. 

Boot and halt. 

Block initialize. 

Block move. 

Boot operating system. 

Set and remove breakpoints. 

Block search; options ;B ;W ;L ;-B ;-W ;-L. 

Block test. 

Alter character display map. 
Alter CRT control registers. 
Checksum. 

Data conversion/evaluation. 
Display formatted registers. 
Dump memory (S->reoords) . 
Go direct. 



mBLB 4-2. TEMbug CommaiiLa and Option Sunnmary (cont'd) 



CX)MMAND 



DESCRIPTION 



G[0] [<address>] 
(NOJGR [<bits» 

GT Kteasparaty breakpoint address> 

HE 

IOC 

lOP 

lOT [<device>] [<controller» 

LO[<port nutnber>] (;<options>] »<text> 

MD[<port number>] <address> {<coi]nt>] [;<options>] 

M [M] <address> [ ; <opt ions> ] 

MS <address> <data> 

OP 

[NO]PA[<port nuaibeO] 
PF«port nurober>] 

in [<exit character> [<trailing c}iaracter>] ] 

T(R1 (<count» 

TT <breakpoint address> 

VE[<port number>] (;<options>] «<text> 

VM 



Install breakpoints and go* 

Alter graphics display map* 

Go until address. 

Display connnaands/registers* 

Issue FWINl ccninand. 

Issue physical read/write. 

Teach FWINl a configuration. 

Load (S-reoords)« 

Manory display; options ;DI ;S. 

Memory modify; options ;W ;L ;0 ;V ;N ;DI. 

Manory set (also ASCII) • 

Offset register display* 

Printer attach/detach* 

Port format* 

Ttansparent mode* 

Trace* 

Trace until address* 
Verify (S-records)* 
Tdggle video map* 



APPENDIX B 
TEMbug MESSAGES 



ERROR MESSAGE 



MEANING 



PRINTER NOT READY 
Error 

ILLEGAL INSTRUCTION 
.... Error Trap 

Offset Vector $xxx Error Trap 

Invalid Option... 

valid options are... ;DI or ;S 

IS NOT A HEX DIGIT 

DATA DID NOT STORE 

Invalid Address 

What? 
NOT HEX 

DISK ERROR: Status=xx xx xx xx 
DISK ERROR: Status=Busy 



Printer is not properly connected or cannot 
receive output. 

Error (prefix) . 

Instruction used an illegal opcode. 

See Traps in M68000 16/32-Bit Microprocessor 
Progranmer's Reference Manual. 

Indicates uninitialized vector. 

Memory Display ccxnmand response to invalid 
option. 

Improper character entered in a field that 
requires a hexadecimal digit. 

Data did not go vdiere intended (such as 
attempting to write to ROM) . 

Address too big (1 in bits 24 - 31) or odd for 
.W or .L (1 in bit 0) . 

Program does not recognize user's entry. 

Same as IS NOT A HEX DIGIT. 

XX XX XX XX XX xx 

Refer to the Winchester Disk Controller User's 
Manual for explanation of the ten status 
bytes. 
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OTHER MESSAGE 



MEANING 



TENbug 2.x > 
Software Abort 
Break 

At Breakpoint 
Physical Address 

.PC within "DEBUGGER" 
Booting from: xxxx 
Booting from ROM: xxxx 



TENbug 2.x prompt. 

Displayed when ABORT button is used. 

BE^EAK key has been used. 

Indicates program has stopped at breakpoint. 

Actual address calculated using parameters and 
relative offsets. 

Displayed by trace commands indicating care 
must be taken while "TESTING" within TENbug 
(e.g., with breakpoints and STACK). 

Indicates the volume ID of the disk being 
booted. Message is suppressed if volume ID is 
null. 

Indicates the name of the routine in ROM that 
is receiving control during the ROMBOOT 
procedure. 
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APPENDIX C 



CONFIGURATION AREA 



Disks initialized using some systems contain a Volume Identification Block and a 
Disk Configuration Block in sectors 0 and 1, respectively. TENbug looks for 
either "EXORMACS" or "MOTOROLA" in locations $F8-$FF of sector 0 to validate the 
disk. Refer to paragraph 1.3.3 for more information used from the volume ID. 
TENbug then uses the following parameters from the Disk Configuration Block to 
access the disk: 

Attributes word 

Physical sectors per track on media 
Number of heads on drive 
Nurhber of cylinders on media 
Physical sector size of media 
Precompensation cylinder number 

The complete Disk Configuration Block is shown below: 



256-BYTE LENGTH 

SECTOR 1 IN PARAMETER 

OFFSET BYTES DESCRIPTION 







DEVICE STATUS 






OR 


0 


1 


CONFIGURATION ERROR CODE 


1 


1 


CHANNEL TYPE 


2 


1 


DEVICE TYPE 


3 


1 


DRIVER CODE 


4 


2 


ATTRIBUTES MASK 


6 


2 


PARAMETERS MASK 


8 


2 


ATTRIBUTES WORD 


10($A) 


2 


SECTOR SIZE 


12 ($C) 


4 


TOTAL SECTORS 


16 ($10) 


4 


WRITE TIMEOUT (UNUSED) 


20 ($14) 


4 


READ TIMEOUT (UNUSED) 


24 ($18) 


1 


PHYSICAL SECTORS PER TRACK ON MEDIA 


25 ($19) 


1 


NO. OF HEADS ON DRIVE 


26($1A) 


2 


NO. OF CYLINDERS ON MEDIA 


28 ($1C) 


1 


INTERLEAVE FACTOR ON MEDIA 


29($1D) 


1 


SPIRAL OFFSET ON MEDIA 


30($1E) 


2 


PHYSICAL SECTOR SIZE OF MEDIA 


32($20) 


2 


PHYSICAL SECTOR SIZE OF DRIVE 


34 ($22) 


2 


NUMBER OF CYLINDERS ON DRIVE 


36 ($24) 


2 


PRECOMPENSATION CYLINDER # (usually .5 total cyl) 


38 ($26) 


1 


PHYSICAL SECTORS PER TRACK ON DRIVE 


39 ($27) 


7 


RESERVED 


40 ($28) 


60($D8) 


UNUSED 



C-1 



Disks initialized on some systems may not contain the Volume Identification 
Block or the Disk Configuration Block, These disks cannot be accessed by TENbug 
until the locations $F8-$FF of sector 0 are modified to contain either 
"EXORMACS" or "MOTOROLA". TEMbug then uses the following default values to 
access the disk. These default values will allow access of track 0 for all 
conf igurat i ons • 

RWINl 





FLOPPY 


HARD 
UloJs, 


Attributes word 


$0F 


$10 


Physical sectors per track on media 


10 


N/A 


Number of heads on drive 


2 


1 


Number of cylinders on media 


50 


1 


Physical sector size of media 


N/A 


N/A 


Precompensation cylinder number 


N/A 


0 



The attributes word is defined as: 



Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 
/ 0 / 0 / 0 /MT/SN/DS/MF/TD/ 



MT - Media Type 

0 = Floppy disk 

1 = Hard disk 

Sector Numbering 

0 = Motorola format 

1 = IBM format 

Diskette Sides 

0 = Single sided 

1 - Double sided 

Recording Method 

0 = Single data density (FM) 

1 = Double data density (MFM) 

Track Density 

0 = Single track density (48 TPI) 

1 = Double track density (96 TPI) 



SN* - 



DS* - 



MF* - 



TD* - 



* Floppy disk attribute only. 
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S-RBCORD OUTPUT FORMAT 



The S-record format for output modules was devised for the purpose of encoding 
programs or data files in a printable format for transportation between computer 
systems. The transportation process can thus be visually monitored and the 
S-records can be more easily edited. 



S-REOORD CONTENT 

When viewed by the user, S-records are essentially character strings made of 
several fields v^ich identify the record type, record length, monory address, 
code/data, and checksum. Each byte of binary data is encoded as a 2-character 
hexadecimal number: the first character r^resenting the high-order four bits, 
and the second the low-order four bits of the byte. 

The five fields v^ich canprise an S-record are shown below: 



+ + + +. 

I type I record length | address | 
+ + + +. 



.+ + 

I checksum | 
.+ + 



code/data 



where the fields are composed as follows: 



FIELD 



PRINTABLE 
CHARACTERS 



CONTENTS 



type 2 
record length 2 



address 



code/data 



4, 6, or 8 



0-2n 



S-record type — SO, SI, etc. 

The count of the character pairs in the record, 
excluding the type and record length. 

The 2-, 3-, or 4-byte address at which the data 
field is to be loaded into memory. 

From 0 to n bytes of executable code, memory- 
loadable data, or descriptive information. For 
compatibility with teletypewriters, some programs 
may limit the number of bytes to as few as 28 (56 
printable characters in the S-record) . 

The least significant byte of the one's complement 
of the sum of the values represented by the pairs 
of characters making up the record length, address, 
and the code/data fields. 

When downloading S-records to TENbug, each record must be terminated with a CR. 
Additionally, an S-record may have an initial field to accommodate other data 
such as line numbers generated by some time-sharing systems. 

Accuracy of transmission is ensured by the record length (byte count) and 
checksum fields. 



checksum 
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S-RBCORD TYPES 



Eight types of S-records have been defined to accommodate the several needs of 
the encoding, transportation, and decoding functions. The various Motorola 
upload, download, and other record transportation control programs, as well as 
cross assenoblers, linkers, and other file-creating or debugging programs, 
utilize only those S-records which serve the purpose of the program. For 
specific information on which S-records are supported by a particular program, 
the user's manual for that program must be consulted. 



An S-record-format module may contain S-records of the following types: 

50 The header record for each block of S-records. The code/data field may 
contain any descriptive information identifying the following block of 
S-records. Under VERSMos, the resident linker's I DENT command can be 
used to designate module name, version nuitber, revision number, and 
description information v^ich will make up the header record. The 
address field is normally zeros. 

51 A record containing code/data and the 2-byte address at which the 
code/data is to reside. 

52 A record containing code/data and the 3-byte address at which the 
code/data is to reside. 

53 A record containing code/data and the 4-byte address at which the 
code/data is to reside. 

S5 A record containing the number of SI, S2, and S3 records transmitted in 
a particular block. This count spears in the address field. There is 
no code/data field. 

57 A termination record for a block of S3 records. The address field may 
optionally contain the 4-byte address of the instruction to which 
control is to be passed. There is no code/data field. 

58 A termination record for a block of S2 records. The address field may 
optionally contain the 3-byte address of the instruction to which 
control is to be passed. There is no code/data field. 

59 A termination record for a block of Si records. The address field may 
optionally contain the 2-byte address of the instruction to which 
control is to be passed. Under VERSAdos, the resident linker's ENTRY 
command can be used to specify this adc^ess. If not specified, the 
first entry point specification encountered in the object module input 
will be used. There is no code/data field. 



Only one termination record is used for each block of S-records. S7 and S8 
records are usually used only v^en control is to be passed to a 3- or 4-byte 
address. Otherwise, an S9 record is used for termination. Normally, only one 
header record is used, although it is possible for multiple header records to 
occur. 
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CREATION OF S~RBCORDS 



S-record-format programs may be produced by several dump utilities, debuggers, 
the VERSAdos resident linkage editor, or several cross assemblers or cross 
linkers. On VERSAdos systems, the Build Load Module (MBLM) utility allows an 
executable load module to be built frcxn S-records, and has a counterpart utility 
in BUILDS, which allows an S-record file to be created from a load module. 

Programs are available for downloading or uploading a file in S-record format 
from a host system to an 8-bit microprocessor-based or a 16-bit microprocessor- 
based system. 



EXAMPLE 

Shown below is a typical S-record-format module, as printed or displayed: 



S00600004844521B 

S1130000285F245F2212226A000424290008237C2A 

S11300100002000800082629001853812341001813 

S113002041E900084E42234300182342000824A952 

S107003000144ED492 

S9030000PC 



The module consists of one SO record, four SI records, and an S9 record. 

The SO record is comprised of the following character pairs: 

SO S-record type SO, indicating that it is a header record. 

06 Hexadecimal 06 (decimal 6) , indicating that six character pairs (or 
ASCII bytes) follow. 

QQ A 4-character, 2-byte address field; zeros in this example. 

48 

44 ASCII H, D, and R - "HDR". 
52 

IB The checksum. 



The first SI record is explained as follows: 

SI S-record type SI, indicating that it is a code/data record to be 
loaded/verified at a 2-byte address. 

13 Hexadecimal 13 (decimal 19), indicating that 19 character pairs, 
representing 19 bytes of binary data, follow. 

00 A 4-character, 2-byte address field; hexadecimal address 0000; where 
00 the data which follows is to be loaded. 
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The next 16 character pairs of the first SI record are the ASCII bytes of the 
actual program code/data. In this assQD4>ly language example, the hexadecimal 
opcodes of the program are written in sequence in the code/data fields of the SI 
records: 



OPCODE INSTRUCTION 

285F MOVE.L {A7)+,A4 

245F MOVE.L (A7)+,A2 

2212 MOVE.L (A2) ,D1 

226A0004 MOVE. L 4 (A2) ,A1 

24290008 MOVE.L FUNCTION (Al) ,D2 

237C MOVE.L #FORCEPUNC, FUNCTION (Al) 



. (The balance of this code is continued in the 
code/data fields of the remaining SI records, 
and stored in menory location 0010, etc.) 

2A The checksum of the first SI record. 

The second and third SI records each also contain $13 (19) character pairs and 
are ended with checksums 13 and 52, respectively. The fourth SI record contains 
07 character pairs and has a checksum of 92. 

The S9 record is explained as follows: 

S9 S-record type S9, indicating that it is a termination record. 

03 Hexadecimal 03, indicating that three character pairs (3 bytes) follow. 

QQ The address field, zeros. 

FC The checksum of the S9 record. 

Each printable character in an S-record is encoded in hexadecimal (ASCII in this 
example) representation of the binary bits whidi are actually transmitted. For 
exanple, the first SI record above is sent as: 





iStgtii 


addram 


ooda/data 


ehaekaun 


8 1 


1 3 


0 0 0 0 


2 8 5 P ... 


2 A 


5 3 


3 1 


3 1 


3 3 


3 0 


3 0 


3 0 


3 0 


3 2 


3 8 


3 5 


4 6 




3 2 


4 1 


0101 0011 


9011 0001 


0011 0001 


0011 0011 


0011 0000 


0011 0000 


0011 0000 


0011 0000 


0011 0010 


0011 1000 


0011 0101 


0100 0110 




0011 0010 


0100 0001 
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